Docs Menu

Push Logs to AWS S3 bucket

You can continually push logs from mongod, mongos, and audit logs to an AWS S3 bucket from an M10+ cluster. Atlas exports logs every 5 minutes.

To push logs to an AWS S3 bucket, you must have Project Owner or Organization Owner access to Atlas.

To push logs to an AWS S3 bucket using the Atlas Administration API, you must have Project Owner access to Atlas.

  • You can't specify which logs to send. Atlas sends all mongod, mongos, and audit logs.

  • Push-based log export doesn't support Bring Your Own Key (BYOK).

  • You can only push logs to an AWS S3 bucket from an M10+ Atlas cluster.

You will need:

  • an AWS account with permissions to manage IAM roles.

  • an existing AWS S3 bucket.

  • An M10+ Atlas cluster.

To continually push logs to an AWS S3 bucket, follow these steps.

1
  1. If it's not already displayed, select the organization that contains your project from the Organizations menu in the navigation bar.

  2. If it's not already displayed, select your project from the Projects menu in the navigation bar.

  3. In the sidebar, click Advanced under the Security heading.

    The Advanced page displays.

2
3
4

You will be prompted to either a) create a new AWS role, or b) use one already attached to Atlas.