Example searches: “400”, “ipAddress”, “groupId”, “500”, “Return Database Access History for One Cluster by Hostname”
You can continually push logs from mongod, mongos, and audit logs to an AWS S3 bucket. Atlas exports logs every 5 minutes.