MongoDB Database Log Forwarding to SIEM

Prabhudeva_Sankar · 2024-05-28T16:32:20.937Z

Hi Community,
For PCI Compliance we wanted to integrate the database logs to SIEM, using Mongo Logs API . I done writing python scripts to pull the activity feeds logs for all project & organisation recurringly , but it collects only the audit logs, Management needs the complete Database logs, please suggest the best practise for integrating logs for PCI compliance and suggest the method for log collection.

thanks,
Prabhudeva S

Samuel_84194 · 2024-05-28T17:15:39.080Z

Hello, welcome to the MongoDB community.

I believe push based log export solves this problem for you. Take a look:

https://registry.terraform.io/providers/mongodb/mongodbatlas/latest/docs/resources/push_based_log_export

Uiliam_Foschiera_de_Mello · 2025-01-10T17:17:02.434Z

Hi guys,

@Prabhudeva_Sankar , did you find a way to send audit logs to your SIEM ? I’m trying to set via push based to S3 bucket but, despite roles/policies are okay on AWS (based on successfully validate settings during push-based enabling process on Atlas), I’m not receiving any log on S3 bucket.

Regards,

Uiliam Mello