The Atlas Organization Activity Feed displays select events that occurred for a given Atlas organization, such as billing or access events.
The Atlas Project Activity Feed provides more granular detail about the state of your cluster. The Project Activity Feed displays select events that occurred for a given Atlas project, such as auto-scaling changes to a minimum or maximum cluster tier.
Required Access
To view the Organization Activity Feed, you must have Organization Member
access or higher to the organization.
To view the Project Activity Feed, you must have Project Read Only
access or higher to the project.
View the Activity Feed
You can access events at the organization or project level. You can use the Atlas UI, Atlas CLI, or the Atlas Administration API. Select the following tabs based on how you would like to access events.
Note
The Organization Activity Feed provides records of all activity at the organization level from the organization's creation to its deletion.
To return all events for an organization using the Atlas CLI, run the following command:
atlas events organizations list [options]
To learn more about the command syntax and parameters, see the Atlas CLI documentation for atlas events organizations list.
You can retrieve events for an organization using the get all API resource.
To view and filter the Organization Activity Feed in the Atlas UI:
In Atlas, go to the Organization Settings page.
WARNING: Navigation Improvements In Progress
We're currently rolling out a new and improved navigation experience. If the following steps don't match your view in the Atlas UI, see the preview documentation.
If it's not already displayed, select your desired organization from the Organizations menu in the navigation bar.
Click the Organization Settings icon next to the Organizations menu.
The Organization Settings page displays.
Go to the Organization Activity Feed page.
Click Activity Feed in the sidebar.
The Organization Activity Feed page displays.
Filter the activity feed.
You can filter the organization activity feed by event type and time range. You can combine filtering methods together for greater control over the activity feed output.
- Filter by event
- Click Filter and select Event. To include event categories or specific events, select is. To exclude event categories or specific events, select is not. From the Filter by event(s) drop-down menu, select the event categories or specific events to include or exclude in the activity feed.
- Filter by event severity
- Click Filter and select Event Severity. To include specific event severities, select is. To exclude specific event severities, select is not. From the Select event severity drop-down menu, select the specific event severities to include or exclude in the activity feed.
- Filter by event sources
- Click Filter and select Initiated By. To include specific event sources, select is. To exclude specific event sources, select is not. From the Select event sources drop-down menu, select the specific event sources to include or exclude in the activity feed. To filter by a specific user, select User and specify the user email.
- Filter by time range
- Select a time range or configure a custom range to view events from within the specified time range.
Note
The Project Activity Feed provides project activity records.
To return all events for a project using the Atlas CLI, run the following command:
atlas events projects list [options]
To learn more about the command syntax and parameters, see the Atlas CLI documentation for atlas events projects list.
You can retrieve events for a project using the get all API resource.
To view and filter the Project Activity Feed in the Atlas UI:
In Atlas, go to the Project Activity Feed page.
WARNING: Navigation Improvements In Progress
We're currently rolling out a new and improved navigation experience. If the following steps don't match your view in the Atlas UI, see the preview documentation.
If it's not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar.
If it's not already displayed, select your desired project from the Projects menu in the navigation bar.
Do one of the following steps:
Click the Project Activity Feed icon in the right side of the navigation bar.
Next to the Projects menu, expand the Options menu, click Project Settings, and click Activity Feed in the sidebar.
The Project Activity Feed page displays.
Filter the activity feed.
You can filter the project activity feed by event type, cluster, and time range. You can combine filtering methods together for greater control over the activity feed output.
- Filter by event
- Select Event. To include event categories or specific events, select is. To exclude event categories or specific events, select is not. From the Filter by event(s) drop-down menu, select the event categories or specific events to include or exclude in the activity feed.
- Filter by event severity
- Click Filter and select Event Severity. To include specific event severities, select is. To exclude specific event severities, select is not. From the Select event severity drop-down menu, select the specific event severities to include or exclude in the activity feed.
- Filter by event sources
- Click Filter and select Initiated By. To include specific event sources, select is. To exclude specific event sources, select is not. From the Select event sources drop-down menu, select the specific event sources to include or exclude in the activity feed. To filter by a specific user, select User and specify the user email.
- Filter by clusters
- Click Filter and select Cluster. To include specific clusters, select is. To exclude specific clusters, select is not. From the Select clusters drop-down menu, select the specific active or deleted clusters to include or exclude in the activity feed.
- Filter by time range
- Select a time range or configure a custom range to view events from within the specified time range.
Isolate User-Specific Activity with Custom Audit Filters
Important
If you enable the new Data Explorer interface, the Project Activity Feed no longer logs the usernames of Atlas users when they read or modify data in the Data Explorer. Although the Project Activity Feed no longer logs usernames, it continues to log user connections from the Atlas UI to a cluster.
To track user activity, you can use database audit logs and create custom audit filters that isolate user activity associated with the following system-generated Administrator roles unique to Data Explorer:
{ role: "atlasDataAccessReadWrite", db: "admin" } { role: "atlasDataAccessReadOnly", db: "admin" } { role: "atlasDataAccessAdmin", db: "admin" }
For example, you could create a custom audit filter similar to the following:
{ "roles": { "$elemMatch": { "$or": [ { "role": "atlasDataAccessReadWrite", "db": "admin" }, { "role": "atlasDataAccessReadOnly", "db": "admin" }, { "role": "atlasDataAccessAdmin", "db": "admin" } ] } } }
To learn more about audit logs and review specific examples of role filters, see Configure Audit Filter.