Auditing
Record authentications, denied access and changes to the catalogue, users and roles.
The audit log writes one event per authentication, denied authorization and change to the catalogue, users or roles. REST API and MCP server requests are recorded too, with their transport.
Shell
teseladb start --auditDestination file --auditFormat JSON --auditPath /var/log/teseladb/audit.json| Option | Values |
|---|---|
--auditDestination | file, syslog or console |
--auditFormat | JSON or BSON, required with file |
--auditSchema | mongo (default) or OCSF |
--auditFilter | Filter with the shape of MongoDB's auditLog.filter |
What is not written
Passwords appear as xxx and any value inside a document or array of the command as ###. MongoDB writes those values
in clear.
Shell
teseladb start --auditDestination file --auditFormat JSON --auditPath ./audit.json \
--auditFilter '{ atype: { $in: ["authenticate", "dropCollection"] } }'