@@ -25,7 +25,8 @@ Features
25
25
Auditing
26
26
````````
27
27
28
- Database auditing lets you track system activity for deployments with
28
+ Available on ``M10+`` {+clusters+}, database auditing lets you track system
29
+ activity for deployments with
29
30
multiple users. As a |service| administrator, you can:
30
31
31
32
- Rely on default auditing settings in |service|. By default, |service|
@@ -60,9 +61,8 @@ Accessing Audit Logs
60
61
61
62
.. include:: /includes/cloud-docs/logs.rst
62
63
63
- To retrieve the audit logs using the {+atlas-admin-api+}, see
64
- :oas-atlas-op:`Logs </downloadLogsForOneClusterHostInOneProject>`. You
65
- can use these API commands:
64
+ To return and update your audit configuration per project, use the following
65
+ `Atlas Administration API <https://www.mongodb.com/docs/atlas/reference/api-resources-spec/v2/>`__ commands:
66
66
67
67
- :ref:`atlas-auditing-describe <atlas-auditing-describe>` returns the
68
68
auditing configuration for the specified project.
@@ -83,8 +83,11 @@ the ``mongodb.log``, and :ref:`the project activity feed <view-activity-feed>`.
83
83
Recommendations for Auditing
84
84
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
85
85
86
- For development and testing environments, do not enable auditing. This
87
- saves costs in your non-production environments.
86
+ We recommend that you enable auditing when you provision your {+clusters+}.
87
+ However, auditing puts additional load on your {+clusters+} and increases costs.
88
+ To optimize costs, you can disable auditing in lower environments for development.
89
+ Certain industries, like healthcare and financial services, may opt to keep
90
+ auditing enabled in development for compliance reasons.
88
91
89
92
For staging and production environments, enable auditing for
90
93
additional security. We recommend that you audit the following events at a minimum:
@@ -126,15 +129,15 @@ Recommendations for Audit Logs
126
129
To integrate with tools beyond the built-in integrations, we recommend
127
130
that you retrieve logs with the following tools and feed the JSON-formatted output to your external tools:
128
131
132
+ - If you use |aws|, you can continually push logs to an |aws| S3
133
+ bucket. To learn more, see the
134
+ :oas-atlas-tag:`Push-Based Log Export <Push-Based-Log-Export>` {+atlas-admin-api+} endpoints.
135
+ - Use the {+atlas-admin-api+} endpoints for :oas-atlas-tag:`Logs <MongoDB-Cloud-Users>` and :oas-atlas-tag:`Project Events <Events>` to
136
+ retrieve deployment logs and lists of project events.
129
137
- Use the ``atlas deployments logs`` command in the {+atlas-cli+}
130
138
to retrieve deployment logs. To learn more,
131
139
see :atlas:`Atlas Deployment Logs
132
140
</cli/current/command/atlas-deployments-logs/>`.
133
- - Use the {+atlas-admin-api+} endpoints for :oas-atlas-tag:`Logs <MongoDB-Cloud-Users>` and :oas-atlas-tag:`Project Events <Events>` to
134
- retrieve deployment logs and lists of project events.
135
- - If you use |aws|, you can continually push logs to an |aws| S3
136
- bucket. To learn more, see the
137
- :oas-atlas-tag:`Push-Based Log Export <Push-Based-Log-Export>` {+atlas-admin-api+} endpoints.
138
141
139
142
Examples
140
143
--------
0 commit comments