Note
System Event Audit Messages are available in MongoDB Enterprise and MongoDB Atlas.系统事件审计消息在MongoDB Enterprise和MongoDB Atlas中可用。
To learn more about this feature in MongoDB Atlas, see the Atlas documentation for Set Up Database Auditing and View and Download MongoDB Logs.要了解有关MongoDB Atlas中此功能的更多信息,请参阅Atlas文档中的设置数据库审计以及查看和下载MongoDB日志。
When the MongoDB auditing facility captures events, you can specify the schema that MongoDB uses for log message output:当MongoDB审计工具捕获事件时,您可以指定MongoDB用于日志消息输出的模式:
Themongoschema writes logs in a format designed by MongoDB. This is the default log output schema.mongo模式以MongoDB设计的格式写入日志。这是默认的日志输出模式。TheOCSF模式以OCSFschema writes logs in OCSF format. This option provides logs in a more widely-used standardized format compatible with log processors.OCSF格式写入日志。此选项以与日志处理器兼容的更广泛使用的标准化格式提供日志。
To set the schema used for log messages, use the 要设置用于日志消息的架构,请使用auditLog.schema configuration file option.auditLog.schema配置文件选项。
For examples and details on the messages returned in each schema, see these pages:有关每个模式中返回的消息的示例和详细信息,请参阅以下页面: