Navigation

View Database Access History

On this page

Feature unavailable in Free and Shared-Tier Clusters

This feature is not available for M0 (Free Tier), M2, and M5 clusters. To learn more about which features are unavailable, see Atlas M0 (Free Tier), M2, and M5 Limitations.

Note

To view database access history, you must have either the Project Owner or Organization Owner role.

Overview

Atlas parses the MongoDB database logs to collect a list of authentication requests made against your clusters through the following methods:

Authentication requests made with API Keys through the Atlas Public API are not logged.

Atlas logs the following information for each authentication request within the last 7 days:

Field Description
Timestamp The date and time of the authentication request.
Username

The username associated with the database user who made the authentication request.

For LDAP usernames, the UI displays the resolved LDAP name. Hover over the name to see the full LDAP username.

IP Address The IP address of the machine that sent the authentication request.
Host The target server that processed the authentication request.
Authentication Source The database that the authentication request was made against. admin is the authentication source for SCRAM-SHA users and $external for LDAP users.
Authentication Result The success or failure of the authentication request. A reason code is displayed for the failed authentication requests.

Authentication requests are pre-sorted by descending timestamp with 25 entries per page.

Logging Limitations

If a cluster experiences an activity spike and generates an extremely large quantity of log messages, Atlas may stop collecting and storing new logs for a period of time.

Note

Log analysis rate limits apply only to the Performance Advisor UI and the Access Tracking UI. Downloadable log files are always complete.

If authentication requests occur during a period when logs are not collected, they will not appear in the database access history.

Procedure

Use the following procedure to view your database access history:

1
2

View the cluster’s database access history.

  1. On the cluster card, click ellipsis h icon .
  2. Select View Database Access History.

or

  1. Click the cluster name.
  2. Click ellipsis h icon .
  3. Select View Database Access History.

To view the database access history using the API, see Access Tracking.