Example searches: “401”, “Access Tracking”, “Return Database Access History for One Cluster by Cluster Name”, “Return Database Access History for One Cluster by Hostname”, “ipAddress”
You can continually push logs from mongod, mongos, and audit logs to an AWS S3 bucket. Atlas exports logs every 5 minutes.