The Atlas Organization Activity Feed displays select events that occurred for a given Atlas organization, such as billing or access events.
The Atlas Project Activity Feed provides more granular detail about the state of your cluster. The Project Activity Feed displays select events that occurred for a given Atlas project, such as auto-scaling changes to a minimum or maximum cluster tier, log export status changes, and integration lifecycle events.
Note
This page applies to both Atlas Infinite and Atlas Core.
Required Access
To view the Organization Activity Feed, you must have at minimum Organization Member access to the organization.
To view the Project Activity Feed, you must have at minimum Project Read Only access to the project.
View the Activity Feed
Select the activity feed type and how you would like to access events.
Note
The Organization Activity Feed provides records of all activity at the organization level from the organization's creation to its deletion.
To return all events for an organization using the Atlas CLI, run the following command:
atlas events organizations list [options]
To learn more about the command syntax and parameters, see the Atlas CLI documentation for atlas events organizations list.
Note
The Organization Activity Feed provides records of all activity at the organization level from the organization's creation to its deletion.
You can retrieve events for an organization using the get all API resource.
Note
The Organization Activity Feed provides records of all activity at the organization level from the organization's creation to its deletion.
To view and filter the Organization Activity Feed in the Atlas UI:
In Atlas, go to the Organization Activity Feed page.
If it's not already displayed, select your desired organization from the Organizations menu in the navigation bar.
In the sidebar, click Activity Feed under the Configurations header.
The Organization Activity Feed page displays.
Filter the activity feed.
You can filter the organization activity feed by event type and time range. You can combine filtering methods together for greater control over the activity feed output.
- Filter by event
- Click Filter and select Event. To include event categories or specific events, select is. To exclude event categories or specific events, select is not. From the Filter by event(s) drop-down menu, select the event categories or specific events to include or exclude in the activity feed.
- Filter by event severity
- Click Filter and select Event Severity. To include specific event severities, select is. To exclude specific event severities, select is not. From the Select event severity drop-down menu, select the specific event severities to include or exclude in the activity feed.
- Filter by event sources
- Click Filter and select Initiated By. To include specific event sources, select is. To exclude specific event sources, select is not. From the Select event sources drop-down menu, select the specific event sources to include or exclude in the activity feed. To filter by a specific user, select User and specify the user email.
- Filter by time range
- Select a time range or configure a custom range to view events from within the specified time range.
Note
The Project Activity Feed provides project activity records.
To return all events for a project using the Atlas CLI, run the following command:
atlas events projects list [options]
To learn more about the command syntax and parameters, see the Atlas CLI documentation for atlas events projects list.
Note
The Project Activity Feed provides project activity records.
You can retrieve events for a project using the get all API resource.
Note
The Project Activity Feed provides project activity records.
To view and filter the Project Activity Feed in the Atlas UI:
In Atlas, go to the Project Activity Feed page.
If it's not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar.
If it's not already displayed, select your desired project from the Projects menu in the navigation bar.
In the sidebar, click Activity Feed under the Security header.
The Project Activity Feed page displays.
Filter the activity feed.
You can filter the project activity feed by event type, cluster, and time range. You can combine filtering methods together for greater control over the activity feed output.
- Filter by event
- Select Event. To include event categories or specific events, select is. To exclude event categories or specific events, select is not. From the Filter by event(s) drop-down menu, select the event categories or specific events to include or exclude in the activity feed.
- Filter by event severity
- Click Filter and select Event Severity. To include specific event severities, select is. To exclude specific event severities, select is not. From the Select event severity drop-down menu, select the specific event severities to include or exclude in the activity feed.
- Filter by event sources
- Click Filter and select Initiated By. To include specific event sources, select is. To exclude specific event sources, select is not. From the Select event sources drop-down menu, select the specific event sources to include or exclude in the activity feed. To filter by a specific user, select User and specify the user email.
- Filter by clusters
- Click Filter and select Cluster. To include specific clusters, select is. To exclude specific clusters, select is not. From the Select clusters drop-down menu, select the specific active or deleted clusters to include or exclude in the activity feed.
- Filter by time range
- Select a time range or configure a custom range to view events from within the specified time range.
Activity Feed Event Types
For a complete list of all event types that appear in the Activity Feed, see Atlas Alert Event Types.
The following event types are specific to log export:
- Log export has failed. Check your integration settings and credentials.
- Log export is failing after multiple attempts. Logs are being queued and will be sent once the connection is restored.
- Log export replay has failed to deliver records to an external platform, even after an automatic replay attempt. These records will be permanently deleted once their retention window expires. Contact MongoDB Support to request redelivery.
- Log export has recovered. Queued logs are ready to resume sending.
- Log export has recovered. Queued logs are now being sent.
- All queued logs have been delivered to sink.
Isolate User-Specific Activity with Custom Audit Filters
Important
In the updated Data Explorer interface, the Project Activity Feed no longer generates individual entries for CRUD operations or regular index builds. When you access a collection through Data Explorer, the Project Activity Feed records only the following entries, which include the Atlas username:
user connectionswhen you open Data ExplorerA single
listIndexStatsentry when you access a collection, regardless of how many read or write operations you perform within that collection
To track additional user activity, use database audit logs and create custom audit filters that isolate user activity associated with the following system-generated Administrator roles unique to Data Explorer:
{ role: "atlasDataAccessReadWrite", db: "admin" } { role: "atlasDataAccessReadOnly", db: "admin" } { role: "atlasDataAccessAdmin", db: "admin" }
For example, you could create a custom audit filter similar to the following:
{ "roles": { "$elemMatch": { "$or": [ { "role": "atlasDataAccessReadWrite", "db": "admin" }, { "role": "atlasDataAccessReadOnly", "db": "admin" }, { "role": "atlasDataAccessAdmin", "db": "admin" } ] } } }
To learn more about audit logs and review specific examples of role filters, see Configure Audit Filter.