This documentation is for version 100.13.0 of mongorestore.
Definition
The mongorestore program loads data from either a binary
database dump created by mongodump or the standard input
into a mongod or mongos instance. mongorestore
is installed when you install
the MongoDB Database Tools.
You can use the MongoDB Database Tools to migrate from a self-hosted deployment to MongoDB Atlas. MongoDB Atlas is the fully managed service for MongoDB deployments in the cloud. To learn more, see Seed with mongorestore.
To learn all the ways you can migrate to MongoDB Atlas, see Migrate or Import Data.
You can restore the BSON files generated from mongodump into MongoDB
deployments running the same major version or feature compatibility version as
the source deployment.
mongorestore has the following behaviors and limitations:
- You must run - mongorestorefrom the system command line, not the MongoDB Shell.
- MongoDB doesn't support running multiple - mongorestoreprograms concurrently for the same collection.
- You can't use - mongorestorewith a collection that uses Queryable Encryption.
Syntax
Use the following command syntax when you run mongorestore:
mongorestore <options> <connection-string> <directory or file to restore> 
See Options for what options you can use when you run
mongorestore.
When you run mongorestore with no arguments, the default setting is to
restore data from a local ./dump directory to a local mongod
instance running on port 27017:
mongorestore 
You can also specify a dump directory at a different path. For example,
the following command restores data from a directory at ./downloads/dump
to an Atlas cluster specified by a connection string:
mongorestore --uri="<my-connection-string>" ./downloads/dump 
As mongorestore restores from the provided directory,
it creates the database and collections as needed and logs its progress:
2019-07-08T14:37:38.942-0400 preparing collections to restore from 2019-07-08T14:37:38.944-0400 reading metadata for test.bakesales from dump/test/bakesales.metadata.json 2019-07-08T14:37:38.944-0400 reading metadata for test.salaries from dump/test/salaries.metadata.json 2019-07-08T14:37:38.976-0400 restoring test.salaries from dump/test/salaries.bson 2019-07-08T14:37:38.985-0400 no indexes to restore 2019-07-08T14:37:38.985-0400 finished restoring test.salaries (10 documents, 0 failures) 2019-07-08T14:37:39.009-0400 restoring test.bakesales from dump/test/bakesales.bson 2019-07-08T14:37:39.011-0400 restoring indexes for collection test.bakesales from metadata 2019-07-08T14:37:39.118-0400 finished restoring test.bakesales (21 documents, 0 failures) 2019-07-08T14:37:39.118-0400 restoring users from dump/admin/system.users.bson 2019-07-08T14:37:39.163-0400 restoring roles from dump/admin/system.roles.bson 2019-07-08T14:37:39.249-0400 31 document(s) restored successfully. 0 document(s) failed to restore. 
You can also restore a specific collection or collections from the
dump directory. For example, the following operation restores the
test.purchaseorders collection from corresponding data files in the dump
directory:
mongorestore --nsInclude=test.purchaseorders ./dump 
If the dump directory does not contain the corresponding data file
for the specified namespace, mongorestore does not restore any data.
For example, the following command specifies a collection namespace
that does not have corresponding data in the dump directory:
mongorestore --nsInclude=foo.bar dump/ 
mongorestore outputs the following messages:
2019-07-08T14:38:15.142-0400 preparing collections to restore from 2019-07-08T14:38:15.142-0400 0 document(s) restored successfully. 0 document(s) failed to restore. 
For more mongorestore examples, see mongorestore Examples.
Options
This section includes information about all available options for
mongorestore.
- --archive=<file>
- Restores from an archive created by - mongodump --archive.- mongorestorerestores from the specified archive file or, if you do not specify a file, from the standard input (- stdin).- To restore from an archive file, run - mongorestorewith the- --archiveoption and the archive filename.- To restore from the standard input, run - mongorestorewith the- --archiveoption and omit the filename.- The following example shows how to restore from the standard input: - mongodump --archive | mongorestore --archive - This command pipeline first runs - mongodumpwith the- --archiveflag, which prints its output to- stdout, or standard output. Then, the input is piped to- mongorestore's standard input by using the- |pipe operator.- Important- You cannot use the - --archiveoption with the- --diroption, which specifies the dump directory.
- The - --dband- --collectionoptions are deprecated when restoring from an archive file. To restore a specific database or collection, use- --nsInclude.
- If you use the - --archiveoption with the- <path>parameter,- mongorestoreignores- <path>.
 
- --authenticationDatabase=<dbname>
- Specifies the authentication database where the specified - --usernamehas been created. Use in conjunction with the- --usernameand- --passwordoptions.- For more information on authentication databases, see Authentication Database. - If using the GSSAPI (Kerberos), PLAIN (LDAP SASL), or - MONGODB-AWS- authentication mechanisms, you must set- --authenticationDatabaseto- $external.- Alternatively, you can also specify the authentication database directly in the - URI connection string. Providing a connection string while also using- --authenticationDatabaseand specifying conflicting information will result in an error.
- --authenticationMechanism=<name>
- Default: SCRAM-SHA-1 - Specifies the authentication mechanism the - mongorestoreinstance uses to authenticate to the- mongodor- mongos.- Changed in version 100.1.0: Starting in version - 100.1.0,- mongorestoreadds support for the- MONGODB-AWSauthentication mechanism when connecting to a MongoDB Atlas cluster.ValueDescription- RFC 5802 standard Salted Challenge Response Authentication Mechanism using the SHA-1 hash function. - RFC 7677 standard Salted Challenge Response Authentication Mechanism using the SHA-256 hash function. - Requires featureCompatibilityVersion set to - 4.0.- MongoDB TLS/SSL certificate authentication. - MONGODB-AWS- External authentication using AWS IAM credentials for use in connecting to a MongoDB Atlas cluster. See Connect to a MongoDB Atlas Cluster using AWS IAM Credentials. - New in version 100.1.0. - GSSAPI (Kerberos) - External authentication using Kerberos. This mechanism is available only in MongoDB Enterprise. - PLAIN (LDAP SASL) - External authentication using LDAP. You can also use - PLAINfor authenticating in-database users.- PLAINtransmits passwords in plain text. This mechanism is available only in MongoDB Enterprise.- Alternatively, you can also specify the authentication mechanism directly in the - URI connection string. Providing a connection string while also using- --authenticationMechanismand specifying conflicting information will result in an error.
- --awsSessionToken=<AWS Session Token>
- If connecting to a MongoDB Atlas cluster using the - MONGODB-AWS- authentication mechanism, and using session tokens in addition to your AWS access key ID and secret access key, you can specify your AWS session token in:- this field, 
- the - AWS_SESSION_TOKEN- authMechanismPropertiesparameter to the- connection string, or
- the - AWS_SESSION_TOKENenvironment variable.
 - See Connect to a MongoDB Atlas Cluster using AWS IAM Credentials for an example of each. - Only valid when using the - MONGODB-AWS- authentication mechanism.
- --bypassDocumentValidation
- Enables - mongorestoreto bypass document validation during the operation. This lets you insert documents that do not meet the validation requirements.
- --collection=<collection>, -c=<collection>
- Important- The use of - --dband- --collectionoptions is deprecated when restoring from a directory or an archive file. To restore a specific database or collection from an archive or a directory, see- --nsInclude.- Specifies the name of the destination collection for - mongorestoreto restore data into when restoring from a BSON file. If you do not specify- --collection,- mongorestoretakes the collection name from the input filename. If the input file has an extension, MongoDB omits the extension of the file from the collection name.- mongorestore --db=reporting --collection=employeesalaries dump/test/salaries.bson 
- --compressors=<string>
- Specifies the compression algorithm that - mongodumpuses for network communication between the- mongorestoreclient and the MongoDB server. You can use one or more of these values for the- --compressorsoption:- snappy
- zlib
- zstd
 - If you specify multiple compression algorithms, - mongorestoreuses the first one in the list supported by your MongoDB deployment.- For more information on compressors, see the Go driver network compression documentation. 
- --config=<filename>
- New in version 100.3.0. - Specifies the full path to a YAML configuration file that contains sensitive values for the following - mongorestoreoptions:- This is the recommended way to specify a password to - mongorestore, aside from specifying it through a password prompt. You can use any combination of the arguments in the file.- The configuration file takes the following form: - password: <password> - uri: mongodb://mongodb0.example.com:27017 - sslPEMKeyPassword: <password> - If you specify the - passwordoption without specifying- uri, you can specify the other components of the connection string by using- mongorestorecommand line options, such as- --usernameand- --host.- Be sure to secure this file with appropriate filesystem permissions. - Important- When using the - --configoption, keep the following limitations and behaviors in mind:- If you provide the - passwordfield and provide a connection string in the- urifield with a conflicting password,- mongorestorethrows an error.
- If you specify a configuration file with - --configand also use the- --password,- --uri, or- --sslPEMKeyPassword- mongorestorecommand line options, the command line option overrides the corresponding configuration file option.
 
- --convertLegacyIndexes
- New in version 100.0.0. - Removes any invalid index options specified in the corresponding - mongodumpoutput, and rewrites any legacy index key values to use valid values.- Invalid index options are any options specified to an index that are not listed as a valid field for the - createIndexescommand. For example,- nameand- collationare valid, but an arbitrary- custom_fieldis not. With- --convertLegacyIndexesspecified, any invalid index options found are dropped.
- Legacy index key values are any values for index type that are no longer supported. For example, - 1and- -1are valid index key values, but- 0or an empty string are legacy values. With- --convertLegacyIndexesspecified, any legacy index key values found are rewritten as- 1. Non-empty string values are not replaced.
 - Without the - --convertLegacyIndexesoption specified, the presence of invalid index options or legacy index key values could cause the index build to fail.- If the - --noIndexRestoreoption is specified to- mongorestore, the- --convertLegacyIndexesoption is ignored.
- --db=<database>, -d=<database>
- Important- The use of - --dband- --collectionoptions is deprecated when restoring from a directory or an archive file. To restore a specific database or collection from an archive or a directory, see- --nsInclude.- Specifies the destination database for - mongorestoreto restore data into when restoring from a BSON file. If the database does not exist,- mongorestorecreates the database. For example, the following example restores the- salariescollection into the- reportingdatabase.- mongorestore --db=reporting dump/test/salaries.bson - If you do not specify - --db,- mongorestorereads the database name from the data files.- Alternatively, you can also specify the database directly in the - URI connection string. Providing a connection string while also using- --dband specifying conflicting information will result in an error.
- --dir=string
- Specifies the dump directory. - You cannot specify both the - --diroption and the- <path>argument, which also specifies the dump directory, to- mongorestore.
- You cannot use the - --archiveoption with the- --diroption.
 
- --drop
- Before restoring the collections from the dumped backup, drops the collections from the target database. - --dropdoes not drop collections that are not in the backup.- When the restore includes the - admindatabase,- mongorestorewith- --dropremoves all user credentials and replaces them with the users defined in the dump file. Therefore, in systems with- authorizationenabled,- mongorestoremust be able to authenticate to an existing user and to a user defined in the dump file. If- mongorestorecan't authenticate to a user defined in the dump file, the restoration process will fail, leaving an empty database.- If a collection is dropped and recreated as part of the restore, the newly created collection has a different UUID unless - --dropis used with- --preserveUUID.
- --dryRun
- Runs - mongorestorewithout actually importing any data, returning the- mongorestoresummary information. Use with- --verboseto produce more detailed summary information.
- --fixDottedHashIndex
- Creates all hashed indexes on dotted fields as single field ascending indexes on the destination database. 
- --gssapiHostName=<hostname>
- Specify the hostname of a service using GSSAPI/Kerberos. Only required if the hostname of a machine does not match the hostname resolved by DNS. - This option is available only in MongoDB Enterprise. 
- --gssapiServiceName=<serviceName>
- Specify the name of the service using GSSAPI/Kerberos. Only required if the service does not use the default name of - mongodb.- This option is available only in MongoDB Enterprise. 
- --gzip
- Restores from compressed files or data stream created by - mongodump --gzip.- To restore from a dump directory that contains compressed files, run - mongorestorewith the- --gzipoption.- To restore from a compressed archive file, run - mongorestorewith both the- --gzipand the- --archiveoptions.
- --host=<hostname><:port>, -h=<hostname><:port>
- Default: localhost:27017 - Specifies the resolvable hostname of the MongoDB deployment. By default, - mongorestoreattempts to connect to a MongoDB instance running on the localhost on port number- 27017.- To connect to a replica set, specify the - replSetNameand a seed list of set members, as in the following:- --host=<replSetName>/<hostname1><:port>,<hostname2><:port>,<...> - When specifying the replica set list format, - mongorestorealways connects to the primary.- You can also connect to any single member of the replica set by specifying the host and port of only that member: - --host=<hostname1><:port> - If you use IPv6 and use the - <address>:<port>format, you must enclose the portion of an address and port combination in brackets (e.g.- [<address>]).- Alternatively, you can also specify the hostname directly in the - URI connection string. Providing a connection string while also using- --hostand specifying conflicting information will result in an error.
- --keepIndexVersion
- Prevents - mongorestorefrom upgrading the index to the latest version during the restoration process.
- --maintainInsertionOrder
- Default: false - If specified, - mongorestoreinserts the documents in the order of their appearance in the input source. That is, both the bulk write batch order and document order within the batches are maintained.- Specifying - --maintainInsertionOrderalso enables- --stopOnErrorand sets- numInsertionWorkersPerCollectionto 1.- If unspecified, - mongorestoremay perform the insertions in an arbitrary order.
- --noIndexRestore
- Prevents - mongorestorefrom restoring and building indexes as specified in the corresponding- mongodumpoutput.
- --noOptionsRestore
- Prevents - mongorestorefrom setting the collection options, such as those specified by the- collModdatabase command, on restored collections.
- --nsExclude=<namespace pattern>
- Specifies a namespace pattern (e.g. - "test.myCollection",- "reporting.*",- "dept*.bar") to exclude the matching namespaces from the restore. In the pattern, you can use asterisks- *as wild cards. For an example of the wildcard pattern, see Restore Collections Using Wild Cards.- You can specify - --nsExcludemultiple times to exclude multiple namespace patterns.- If you specify both - --nsExcludeand- --nsInclude, the pattern that- --nsExcludespecifies takes precedence. For example, if you specify both- --nsExclude="prod.*"and- --nsInclude="prod.trips", no collections from the- prodnamespace are restored.
- --nsFrom=<namespace pattern>
- Use with - --nsToto rename a namespace during the restore operation.- --nsFromspecifies the collection in the dump file, while- --nsTospecifies the name that should be used in the restored database.- --nsFromaccepts a namespace pattern as its argument. The namespace pattern permits- --nsFromto refer to any namespace that matches the specified pattern.- mongorestorematches the smallest valid occurence of the namespace pattern.- For simple replacements, use asterisks ( - *) as wild cards. Escape all literal asterisks and backslashes with a backslash. Replacements correspond linearly to matches: each asterisk in- --nsFrommust correspond to an asterisk in- --nsTo, and the first asterisk in- --nsFrommatches the first asterisk in- nsTo.- For more complex replacements, use dollar signs to delimit a "wild card" variable to use in the replacement. Change Collection Namespaces during Restore provides an example of complex replacements with dollar sign-delimited wild cards. - Unlike replacements with asterisks, replacements with dollar sign-delimited wild cards do not need to be linear. 
- --nsInclude=<namespace pattern>
- Specifies a namespace pattern (e.g. - "test.myCollection",- "reporting.*",- "dept*.bar") to restore only the namespaces that match the pattern. In the pattern, you can use asterisks- *as wild cards. For an example of the wildcard pattern, see Restore Collections Using Wild Cards.- You can specify - --nsIncludemultiple times to include multiple namespace patterns.- If source directory or file (i.e. the directory/file from which you are restoring the data) does not contain data files that match the namespace pattern, no data will be restored. - For collection names that contain non-ascii characters, - mongodumpoutputs the corresponding filenames with percent-encoded names. However, to restore these collections, do not use the encoded names. Instead, use the namespace with the non-ascii characters.- For example, if the dump directory contains - dump/test/caf%C3%A9s.bson, specify- --nsInclude "test.cafés".- If you specify both - --nsExcludeand- --nsInclude, the pattern that- --nsExcludespecifies takes precedence. For example, if you specify both- --nsExclude="prod.*"and- --nsInclude="prod.trips", no collections from the- prodnamespace are restored.
- --nsTo=<namespace pattern>
- Use with - --nsFromto rename a namespace during the restore operation.- --nsTospecifies the new collection name to use in the restored database, while- --nsFromspecifies the name in the dump file.- --nsToaccepts a namespace pattern as its argument. The namespace pattern permits- --nsToto refer to any namespace that matches the specified pattern.- mongorestorematches the smallest valid occurence of the namespace pattern.- For simple replacements, use asterisks ( - *) as wild cards. Escape all literal asterisks and backslashes with a backslash. Replacements correspond linearly to matches: each asterisk in- --nsFrommust correspond to an asterisk in- --nsTo, and the first asterisk in- --nsFrommatches the first asterisk in- nsTo.- For more complex replacements, use dollar signs to delimit a "wild card" variable to use in the replacement. Change Collection Namespaces during Restore provides an example of complex replacements with dollar sign-delimited wild cards. - Unlike replacements with asterisks, replacements with dollar sign-delimited wild cards do not need to be linear. 
- --numInsertionWorkersPerCollection=<int>
- Default: 1 - Specifies the number of insertion workers to run concurrently per collection. - For large imports, increasing the number of insertion workers may increase the speed of the import. 
- --numParallelCollections=<int>, -j=<int>
- Default: 4 - Number of collections - mongorestoreshould restore in parallel.- If you specify - -jwhen restoring a single collection,- -jmaps to the- --numInsertionWorkersPerCollectionoption rather than- --numParallelCollections.
- --objcheck
- Forces - mongorestoreto validate all requests from clients upon receipt to ensure that clients never insert invalid documents into the database. For objects with a high degree of sub-document nesting,- --objcheckcan have a small impact on performance.
- --oplogFile=<path>
- Specifies the path to the oplog file containing oplog data for the restore. Use with - --oplogReplay.- If you specify - --oplogFileand there is an- oplog.bsonfile at the top level of the dump directory,- mongorestorereturns an error.- Warning- Use - oplogFilewith caution: manually specifying the oplog entries to apply might cause corruption and inconsistencies in the restored data.
- --oplogLimit=<timestamp>
- Prevents - mongorestorefrom applying oplog entries with timestamp newer than or equal to- <timestamp>. Specify- <timestamp>values in the form of- <time_t>:<ordinal>, where- <time_t>is the seconds since the UNIX epoch, and- <ordinal>represents a counter of operations in the oplog that occurred in the specified second.- Warning- Use - oplogLimitwith caution: manually specifying the oplog entries to apply might cause corruption and inconsistencies in the restored data.- You must use - --oplogLimitin conjunction with the- --oplogReplayoption.
- --oplogReplay
- After restoring the database dump, replays the oplog entries from an - oplog.bsonfile.- To apply oplog entries from the - oplog.bsonfile in the restore, use- mongorestore --oplogReplay. You can use- mongodump --oplogtogether with- mongorestore --oplogReplayto ensure the data is current and has all the writes that occurred during the dump operation.- mongorestoresearches for any valid source for the bson file in the following locations:- The top level of the dump directory, as in the case of a dump created with - mongodump --oplog.
- The path specified by - --oplogFile.
- <dump-directory>/local/oplog.rs.bson, as in the case of a dump of the- oplog.rscollection in the- localdatabase on a- mongodthat is a member of a replica set.
 - If there is an - oplog.bsonfile at the top level of the dump directory and a path specified by- --oplogFile,- mongorestorereturns an error.- If there is an - oplog.bsonfile at the top level of the dump directory,- mongorestorerestores that file as the oplog. If there are also bson files in the- dump/localdirectory,- mongorestorerestores them like normal collections.- If you specify an oplog file using - --oplogFile,- mongorestorerestores that file as the oplog. If there are also bson files in the- dump/localdirectory,- mongorestorerestores them like normal collections.- The following message in the oplog replay output shows the number of inserts before the oplog replay. It does not include inserts performed during the replay. - 0 document(s) restored successfully. 0 document(s) failed to - restore. - For an example of - --oplogReplay, see Use an Oplog File to Backup and Restore Data.- Note- When using - mongorestorewith- --oplogReplayto restore a replica set, you must restore a full dump of a replica set member created using- mongodump --oplog.- mongorestorewith- --oplogReplayfails if you use any of the following options to limit the data to be restored:
- --password=<password>, -p=<password>
- Specifies a password with which to authenticate to a MongoDB database that uses authentication. Use in conjunction with the - --usernameand- --authenticationDatabaseoptions.- To prompt the user for the password, pass the - --usernameoption without- --passwordor specify an empty string as the- --passwordvalue, as in- --password="".- Alternatively, you can also specify the password directly in the - URI connection string. Providing a connection string while also using- --passwordand specifying conflicting information will result in an error.- If connecting to a MongoDB Atlas cluster using the - MONGODB-AWS- authentication mechanism, you can specify your AWS secret access key in:- this field, 
- the - connection string, or
- the - AWS_SECRET_ACCESS_KEYenvironment variable.
 - See Connect to a MongoDB Atlas Cluster using AWS IAM Credentials for an example of each. - Warning- On some systems, a password provided directly using the - --passwordoption may be visible to system status programs such as- psthat may be invoked by other users. Consider instead:- omitting the - --passwordoption to receive an interactive password prompt, or
- using the - --configoption to specify a configuration file containing the password.
 
- <path>
- The directory path or BSON file name from which to restore data. - You cannot specify both the - <path>argument and the- --diroption, which also specifies the dump directory, to- mongorestore.
- --port=<port>
- Default: 27017 - Specifies the TCP port on which the MongoDB instance listens for client connections. - Alternatively, you can also specify the port directly in the - URI connection string. Providing a connection string while also using- --portand specifying conflicting information will result in an error.
- --preserveUUID
- Restored collections use the UUID from the restore data instead of creating a new UUID for collections that are dropped and recreated as part of the restore. - To use - --preserveUUID, you must also include the- --dropoption.
- --quiet
- Runs - mongorestorein a quiet mode that attempts to limit the amount of output.- This option suppresses: - errors 
- output from database commands 
- replication activity 
- connection accepted events 
- connection closed events 
 
- --restoreDbUsersAndRoles
- Restore user and role definitions for the given database. See system.roles Collection and system.users Collection for more information. - Note- You can only use - --restoreDbUsersAndRoleson a database dump that was created with the- --dumpDbUsersAndRolesoption.
- Restoring the - admindatabase by specifying- --db adminautomatically restores all users and roles. You cannot use- --restoreDbUsersAndRoleson the- admindatabase, and attempting to do so results in an error.
 
- --ssl
- Enables connection to a - mongodor- mongosthat has TLS/SSL support enabled.- Alternatively, you can also configure TLS/SSL support directly in the - URI connection string. Providing a connection string while also using- --ssland specifying conflicting information will result in an error.- For more information about TLS/SSL and MongoDB, see Configure mongod and mongos for TLS/SSL and TLS/SSL Configuration for Clients. 
- --sslAllowInvalidCertificates
- Bypasses the validation checks for server certificates and allows the use of invalid certificates. When using the - allowInvalidCertificatessetting, MongoDB logs as a warning the use of the invalid certificate.- Warning- Although available, avoid using the - --sslAllowInvalidCertificatesoption if possible. If the use of- --sslAllowInvalidCertificatesis necessary, only use the option on systems where intrusion is not possible.- Connecting to a - mongodor- mongosinstance without validating server certificates is a potential security risk. If you only need to disable the validation of the hostname in the TLS/SSL certificates, see- --sslAllowInvalidHostnames.- Alternatively, you can also disable certificate validation directly in the - URI connection string. Providing a connection string while also using- --sslAllowInvalidCertificatesand specifying conflicting information will result in an error.- For more information about TLS/SSL and MongoDB, see Configure mongod and mongos for TLS/SSL and TLS/SSL Configuration for Clients. 
- --sslAllowInvalidHostnames
- Disables the validation of the hostnames in TLS/SSL certificates. Allows - mongorestoreto connect to MongoDB instances even if the hostname in their certificates do not match the specified hostname.- Alternatively, you can also disable hostname validation directly in the - URI connection string. Providing a connection string while also using- --sslAllowInvalidHostnamesand specifying conflicting information will result in an error.- For more information about TLS/SSL and MongoDB, see Configure mongod and mongos for TLS/SSL and TLS/SSL Configuration for Clients. 
- --sslCAFile=<filename>
- Specifies the - .pemfile that contains the root certificate chain from the Certificate Authority. Specify the file name of the- .pemfile using relative or absolute paths.- Alternatively, you can also specify the - .pemfile directly in the- URI connection string. Providing a connection string while also using- --sslCAFileand specifying conflicting information will result in an error.- For more information about TLS/SSL and MongoDB, see Configure mongod and mongos for TLS/SSL and TLS/SSL Configuration for Clients. 
- --sslCRLFile=<filename>
- Specifies the - .pemfile that contains the Certificate Revocation List. Specify the file name of the- .pemfile using relative or absolute paths.- For more information about TLS/SSL and MongoDB, see Configure mongod and mongos for TLS/SSL and TLS/SSL Configuration for Clients. 
- --sslPEMKeyFile=<filename>
- Specifies the - .pemfile that contains both the TLS/SSL certificate and key. Specify the file name of the- .pemfile using relative or absolute paths.- This option is required when using the - --ssloption to connect to a- mongodor- mongosthat has- CAFileenabled without- allowConnectionsWithoutCertificates.- Alternatively, you can also specify the - .pemfile directly in the- URI connection string. Providing a connection string while also using- --sslPEMKeyFileand specifying conflicting information will result in an error.- For more information about TLS/SSL and MongoDB, see Configure mongod and mongos for TLS/SSL and TLS/SSL Configuration for Clients. 
- --sslPEMKeyPassword=<value>
- Specifies the password to de-crypt the certificate-key file (i.e. - --sslPEMKeyFile). Use the- --sslPEMKeyPasswordoption only if the certificate-key file is encrypted. In all cases, the- mongorestorewill redact the password from all logging and reporting output.- If the private key in the PEM file is encrypted and you do not specify the - --sslPEMKeyPasswordoption, the- mongorestorewill prompt for a passphrase. See TLS/SSL Certificate Passphrase.- Alternatively, you can also specify the password directly in the - URI connection string. Providing a connection string while also using- --sslPEMKeyPasswordand specifying conflicting information will result in an error.- For more information about TLS/SSL and MongoDB, see Configure mongod and mongos for TLS/SSL and TLS/SSL Configuration for Clients. - Warning- On some systems, a password provided directly using the - --sslPEMKeyPasswordoption may be visible to system status programs such as- psthat may be invoked by other users. Consider using the- --configoption to specify a configuration file containing the password instead.
- --stopOnError
- Forces - mongorestoreto halt the restore when it encounters an error.- By default, - mongorestorecontinues when it encounters duplicate key and document validation errors. To ensure that the program stops on these errors, specify- --stopOnError.
- --uri=<connectionString>
- Specifies the resolvable URI connection string of the MongoDB deployment, enclosed in quotes: - --uri="mongodb://[username:password@]host1[:port1][,host2[:port2],...[,hostN[:portN]]][/[database][?options]]" - Starting with version - 100.0of- mongorestore, the connection string may alternatively be provided as a positional parameter, without using the- --urioption:- mongorestore mongodb://[username:password@]host1[:port1][,host2[:port2],...[,hostN[:portN]]][/[database][?options]] - As a positional parameter, the connection string may be specified at any point on the command line, as long as it begins with either - mongodb://or- mongodb+srv://. For example:- mongorestore --username joe --password secret1 mongodb://mongodb0.example.com:27017 --ssl - Only one connection string can be provided. Attempting to include more than one, whether using the - --urioption or as a positional argument, will result in an error.- For information on the components of the connection string, see the Connection String URI Format documentation. - Note- Some components in the - connection stringmay alternatively be specified using their own explicit command-line options, such as- --usernameand- --password. Providing a connection string while also using an explicit option and specifying conflicting information will result in an error.- Note- If using - mongorestoreon Ubuntu 18.04, you may experience a- cannot unmarshal DNSerror message when using SRV connection strings (in the form- mongodb+srv://) with the- --urioption. If so, use one of the following options instead:- the - --urioption with a non-SRV connection string (in the form- mongodb://)
- the - --hostoption to specify the host to connect to directly
 - Warning- On some systems, a password provided in a connection string with the - --urioption may be visible to system status programs such as- psthat may be invoked by other users. Consider instead:- omitting the password in the connection string to receive an interactive password prompt, or 
- using the - --configoption to specify a configuration file containing the password.
 
- --username=<username>, -u=<username>
- Specifies a username with which to authenticate to a MongoDB database that uses authentication. Use in conjunction with the - --passwordand- --authenticationDatabaseoptions.- Alternatively, you can also specify the username directly in the - URI connection string. Providing a connection string while also using- --usernameand specifying conflicting information will result in an error.- If connecting to a MongoDB Atlas cluster using the - MONGODB-AWS- authentication mechanism, you can specify your AWS access key ID in:- this field, 
- the - connection string, or
- the - AWS_ACCESS_KEY_IDenvironment variable.
 - See Connect to a MongoDB Atlas Cluster using AWS IAM Credentials for an example of each. 
- --verbose, -v
- Increases the amount of internal reporting returned on standard output or in log files. Increase the verbosity with the - -vform by including the option multiple times, (e.g.- -vvvvv.)
- --writeConcern=<document>
- Default: majority - Specifies the write concern for each write operation that - mongorestoreperforms.- Specify the write concern as a document with w options: - --writeConcern="{w:'majority'}" - If the write concern is also included in the - --uri connection string, the command-line- --writeConcernoverrides the write concern specified in the URI string.