Integration

MongoDB

Operations, document changes, connections, memory, network and the server log.

Category: Databases
How data is sent: Logthread Agent
Runs on: Linux
Status: Beta

How it works#

Answer a few questions. They only fill in the setup steps. Nothing on this page connects to your servers: Logthread never reaches into your network.
Run one command on the MongoDB machine. The next page shows the command with this connector's ingest key filled in. It downloads the Logthread Agent from downloads.logthread.com and installs it as a service (Linux, as root with sudo). No other download. If the agent cannot run on that machine, run it on one that can reach MongoDB over your private network and set the server below.
Data arrives. Everything is collected inside your environment. It is sent over outbound HTTPS (port 443) to ingest.logthread.com. Nothing is opened to the internet: no inbound ports, VPN or public access to your servers. The connection page shows what has arrived and turns Active with the first record.

What you answer#

Question	Answer	Notes
Server (optional)	Text	host:port the agent reads from, on your network. Leave empty when it runs on the same machine.
Log file (optional)	Text	Default: /var/log/mongodb/mongod.log.
Labels (optional)	Text	For Fleet and filtering, for example env=prod.
Manage this agent from Fleet	Yes or no	Change its configuration from Logthread later without logging in to the host. Default: `Yes`.

Setup#

These are the steps for the default answers. In the app, they follow your answers, and the connector's ingest key replaces YOUR_INGEST_KEY.

Step 1. Create a monitoring user. clusterMonitor reads server statistics only; no access to your collections.

In mongosh, as an admin:

db.getSiblingDB('admin').createUser({
  user: 'logthread_agent',
  pwd: passwordPrompt(),  // mongosh asks for it
  roles: [{ role: 'clusterMonitor', db: 'admin' },
          { role: 'read', db: 'local' }]
})

Step 2. Install the Logthread Agent. On the MongoDB host: it installs the agent with the MongoDB and Linux host profiles. It asks for the password (hidden, not kept in your shell history) and writes it to a file only root can read. The JSON server log is parsed on the host (severity, component, message).

curl -sSL https://downloads.logthread.com/agent/install.sh | sudo sh -s -- \
  --key YOUR_INGEST_KEY --profiles linux-host,mongodb --fleet
printf 'Password of logthread_agent: '; stty -echo; read -r LT_PASSWORD; stty echo; echo
sudo tee -a /etc/logthread-agent/agent.env >/dev/null <<EOF
LOGTHREAD_MONGODB_ENDPOINT=localhost:27017
LOGTHREAD_MONGODB_USER=logthread_agent
LOGTHREAD_MONGODB_PASSWORD=$LT_PASSWORD
EOF
unset LT_PASSWORD
sudo systemctl restart logthread-agent

Step 3. Wait for data. Metrics arrive within a minute; log lines as mongod writes them (with systemLog.destination: file, the default for packages).

Check that it works#

The connection page under Integrations counts what has arrived and turns Active with the first record. In Explore, search service:mongodb.

Then add#

Each is one click on the connection page and opens with your data, so you can check it before saving.

Dashboard: MongoDB: Operations, data size, connections, memory and cursors, and warnings and errors from the server log.
Alert: MongoDB errors: service:mongodb severity:(error|fatal), at least 5 in 10 minutes

Set it up under Integrations in the app, or from an AI agent with MCP (add_integration). All integrations: Integrations guide. Next: find what it sends in Explore and live tail.