Tailstream
Back to Blog

One Command Setup: Tailstream Agent Gets Even Simpler

Setting up log streaming just got effortless. The latest Tailstream Agent update replaces manual token entry with a magical one-command OAuth flow.

From Manual to Magical

Previously, agent setup required copying Stream IDs and ingest tokens from your Tailstream dashboard. While functional, the setup process still required users to log in, find the appropriate stream and fill in the credentials.

Now, setup is truly one command:

tailstream-agent

That's it. The agent handles everything: authentication, stream discovery, selection, and configuration storage.

OAuth Device Code Flow

The new setup uses OAuth 2.0 Device Code Flow, designed specifically for headless environments and server deployments. Here's how it works:

  1. Device Code Request: Agent requests a unique device code from Tailstream
  2. User Authorization: You visit the provided URL and authorize the agent using your existing Tailstream account
  3. Automatic Discovery: Agent discovers all available streams in your account
  4. Interactive Selection: Choose which stream to use for this agent instance
  5. Token Exchange: Agent receives a stream-specific ingest token and stores the configuration

The entire flow works over SSH and on servers without direct browser access.

Enhanced Security

The new OAuth flow improves security by:

  • Stream-specific tokens: Each agent gets tokens limited to a single stream
  • No persistent OAuth tokens: Powerful API tokens are used only during setup and immediately discarded
  • Reduced attack surface: Agents store minimal credentials with limited scope

Backward Compatibility

Existing configurations continue working unchanged. The agent supports multiple setup methods:

  • Default OAuth setup: tailstream-agent (new default)
  • Explicit OAuth flow: tailstream-agent oauth
  • Legacy manual setup: tailstream-agent setup (for existing workflows)

Perfect for DevOps

The OAuth flow shines in modern deployment scenarios:

  • Infrastructure as Code: Consistent setup across automated deployments
  • SSH access: Works perfectly over terminal-only connections
  • Team sharing: Each team member authorizes using their own Tailstream account

Streamlined Experience

Setup now feels like authorizing any modern application. Visit the URL, click authorize, and return to find your agent fully configured and streaming logs.

For teams managing multiple servers, the OAuth flow eliminates the tedious process of copying tokens between browser and terminal while maintaining security best practices.

Get the Update

Update your agent to experience the simplified setup:

curl -fsSL https://install.tailstream.io | sudo bash

Then run the new one-command setup:

tailstream-agent

The OAuth flow makes log streaming setup as simple as it should be. Try it at tailstream.io.

All Blog Posts