This documentation is for version 100.13.0 of mongorestore.
Definition
The mongorestore program loads data from either a binary
database dump created by mongodump or the standard input
into a mongod or mongos instance. mongorestore
is installed when you install
the MongoDB Database Tools.
You can use the MongoDB Database Tools to migrate from a self-hosted deployment to MongoDB Atlas. MongoDB Atlas is the fully managed service for MongoDB deployments in the cloud. To learn more, see Seed with mongorestore.
To learn all the ways you can migrate to MongoDB Atlas, see Migrate or Import Data.
You can restore the BSON files generated from mongodump into MongoDB
deployments running the same major version or feature compatibility version as
the source deployment.
mongorestore has the following behaviors and limitations:
You must run
mongorestorefrom the system command line, not the MongoDB Shell.MongoDB doesn't support running multiple
mongorestoreprograms concurrently for the same collection.You can't use
mongorestorewith a collection that uses Queryable Encryption.
Syntax
Use the following command syntax when you run mongorestore:
mongorestore <options> <connection-string> <directory or file to restore>
See Options for what options you can use when you run
mongorestore.
When you run mongorestore with no arguments, the default setting is to
restore data from a local ./dump directory to a local mongod
instance running on port 27017:
mongorestore
You can also specify a dump directory at a different path. For example,
the following command restores data from a directory at ./downloads/dump
to an Atlas cluster specified by a connection string:
mongorestore --uri="<my-connection-string>" ./downloads/dump
As mongorestore restores from the provided directory,
it creates the database and collections as needed and logs its progress:
2019-07-08T14:37:38.942-0400 preparing collections to restore from 2019-07-08T14:37:38.944-0400 reading metadata for test.bakesales from dump/test/bakesales.metadata.json 2019-07-08T14:37:38.944-0400 reading metadata for test.salaries from dump/test/salaries.metadata.json 2019-07-08T14:37:38.976-0400 restoring test.salaries from dump/test/salaries.bson 2019-07-08T14:37:38.985-0400 no indexes to restore 2019-07-08T14:37:38.985-0400 finished restoring test.salaries (10 documents, 0 failures) 2019-07-08T14:37:39.009-0400 restoring test.bakesales from dump/test/bakesales.bson 2019-07-08T14:37:39.011-0400 restoring indexes for collection test.bakesales from metadata 2019-07-08T14:37:39.118-0400 finished restoring test.bakesales (21 documents, 0 failures) 2019-07-08T14:37:39.118-0400 restoring users from dump/admin/system.users.bson 2019-07-08T14:37:39.163-0400 restoring roles from dump/admin/system.roles.bson 2019-07-08T14:37:39.249-0400 31 document(s) restored successfully. 0 document(s) failed to restore.
You can also restore a specific collection or collections from the
dump directory. For example, the following operation restores the
test.purchaseorders collection from corresponding data files in the dump
directory:
mongorestore --nsInclude=test.purchaseorders ./dump
If the dump directory does not contain the corresponding data file
for the specified namespace, mongorestore does not restore any data.
For example, the following command specifies a collection namespace
that does not have corresponding data in the dump directory:
mongorestore --nsInclude=foo.bar dump/
mongorestore outputs the following messages:
2019-07-08T14:38:15.142-0400 preparing collections to restore from 2019-07-08T14:38:15.142-0400 0 document(s) restored successfully. 0 document(s) failed to restore.
For more mongorestore examples, see mongorestore Examples.
Options
This section includes information about all available options for
mongorestore.
--archive=<file>Restores from an archive created by
mongodump --archive.mongorestorerestores from the specified archive file or, if you do not specify a file, from the standard input (stdin).To restore from an archive file, run
mongorestorewith the--archiveoption and the archive filename.To restore from the standard input, run
mongorestorewith the--archiveoption and omit the filename.The following example shows how to restore from the standard input:
mongodump --archive | mongorestore --archive This command pipeline first runs
mongodumpwith the--archiveflag, which prints its output tostdout, or standard output. Then, the input is piped tomongorestore's standard input by using the|pipe operator.Important
You cannot use the
--archiveoption with the--diroption, which specifies the dump directory.The
--dband--collectionoptions are deprecated when restoring from an archive file. To restore a specific database or collection, use--nsInclude.If you use the
--archiveoption with the<path>parameter,mongorestoreignores<path>.
--authenticationDatabase=<dbname>Specifies the authentication database where the specified
--usernamehas been created. Use in conjunction with the--usernameand--passwordoptions.For more information on authentication databases, see Authentication Database.
If using the GSSAPI (Kerberos), PLAIN (LDAP SASL), or
MONGODB-AWSauthentication mechanisms, you must set--authenticationDatabaseto$external.Alternatively, you can also specify the authentication database directly in the
URI connection string. Providing a connection string while also using--authenticationDatabaseand specifying conflicting information will result in an error.
--authenticationMechanism=<name>Default: SCRAM-SHA-1
Specifies the authentication mechanism the
mongorestoreinstance uses to authenticate to themongodormongos.Changed in version 100.1.0: Starting in version
100.1.0,mongorestoreadds support for theMONGODB-AWSauthentication mechanism when connecting to a MongoDB Atlas cluster.ValueDescriptionRFC 5802 standard Salted Challenge Response Authentication Mechanism using the SHA-1 hash function.
RFC 7677 standard Salted Challenge Response Authentication Mechanism using the SHA-256 hash function.
Requires featureCompatibilityVersion set to
4.0.MongoDB TLS/SSL certificate authentication.
MONGODB-AWSExternal authentication using AWS IAM credentials for use in connecting to a MongoDB Atlas cluster. See Connect to a MongoDB Atlas Cluster using AWS IAM Credentials.
New in version 100.1.0.
GSSAPI (Kerberos)
External authentication using Kerberos. This mechanism is available only in MongoDB Enterprise.
PLAIN (LDAP SASL)
External authentication using LDAP. You can also use
PLAINfor authenticating in-database users.PLAINtransmits passwords in plain text. This mechanism is available only in MongoDB Enterprise.Alternatively, you can also specify the authentication mechanism directly in the
URI connection string. Providing a connection string while also using--authenticationMechanismand specifying conflicting information will result in an error.
--awsSessionToken=<AWS Session Token>If connecting to a MongoDB Atlas cluster using the
MONGODB-AWSauthentication mechanism, and using session tokens in addition to your AWS access key ID and secret access key, you can specify your AWS session token in:this field,
the
AWS_SESSION_TOKENauthMechanismPropertiesparameter to theconnection string, orthe
AWS_SESSION_TOKENenvironment variable.
See Connect to a MongoDB Atlas Cluster using AWS IAM Credentials for an example of each.
Only valid when using the
MONGODB-AWSauthentication mechanism.
--bypassDocumentValidationEnables
mongorestoreto bypass document validation during the operation. This lets you insert documents that do not meet the validation requirements.
--collection=<collection>, -c=<collection>Important
The use of
--dband--collectionoptions is deprecated when restoring from a directory or an archive file. To restore a specific database or collection from an archive or a directory, see--nsInclude.Specifies the name of the destination collection for
mongorestoreto restore data into when restoring from a BSON file. If you do not specify--collection,mongorestoretakes the collection name from the input filename. If the input file has an extension, MongoDB omits the extension of the file from the collection name.mongorestore --db=reporting --collection=employeesalaries dump/test/salaries.bson
--compressors=<string>Specifies the compression algorithm that
mongodumpuses for network communication between themongorestoreclient and the MongoDB server. You can use one or more of these values for the--compressorsoption:snappyzlibzstd
If you specify multiple compression algorithms,
mongorestoreuses the first one in the list supported by your MongoDB deployment.For more information on compressors, see the Go driver network compression documentation.
--config=<filename>New in version 100.3.0.
Specifies the full path to a YAML configuration file that contains sensitive values for the following
mongorestoreoptions:This is the recommended way to specify a password to
mongorestore, aside from specifying it through a password prompt. You can use any combination of the arguments in the file.The configuration file takes the following form:
password: <password> uri: mongodb://mongodb0.example.com:27017 sslPEMKeyPassword: <password> If you specify the
passwordoption without specifyinguri, you can specify the other components of the connection string by usingmongorestorecommand line options, such as--usernameand--host.Be sure to secure this file with appropriate filesystem permissions.
Important
When using the
--configoption, keep the following limitations and behaviors in mind:If you provide the
passwordfield and provide a connection string in theurifield with a conflicting password,mongorestorethrows an error.If you specify a configuration file with
--configand also use the--password,--uri, or--sslPEMKeyPasswordmongorestorecommand line options, the command line option overrides the corresponding configuration file option.
--convertLegacyIndexesNew in version 100.0.0.
Removes any invalid index options specified in the corresponding
mongodumpoutput, and rewrites any legacy index key values to use valid values.Invalid index options are any options specified to an index that are not listed as a valid field for the
createIndexescommand. For example,nameandcollationare valid, but an arbitrarycustom_fieldis not. With--convertLegacyIndexesspecified, any invalid index options found are dropped.Legacy index key values are any values for index type that are no longer supported. For example,
1and-1are valid index key values, but0or an empty string are legacy values. With--convertLegacyIndexesspecified, any legacy index key values found are rewritten as1. Non-empty string values are not replaced.
Without the
--convertLegacyIndexesoption specified, the presence of invalid index options or legacy index key values could cause the index build to fail.If the
--noIndexRestoreoption is specified tomongorestore, the--convertLegacyIndexesoption is ignored.
--db=<database>, -d=<database>Important
The use of
--dband--collectionoptions is deprecated when restoring from a directory or an archive file. To restore a specific database or collection from an archive or a directory, see--nsInclude.Specifies the destination database for
mongorestoreto restore data into when restoring from a BSON file. If the database does not exist,mongorestorecreates the database. For example, the following example restores thesalariescollection into thereportingdatabase.mongorestore --db=reporting dump/test/salaries.bson If you do not specify
--db,mongorestorereads the database name from the data files.Alternatively, you can also specify the database directly in the
URI connection string. Providing a connection string while also using--dband specifying conflicting information will result in an error.
--dir=stringSpecifies the dump directory.
You cannot specify both the
--diroption and the<path>argument, which also specifies the dump directory, tomongorestore.You cannot use the
--archiveoption with the--diroption.
--dropBefore restoring the collections from the dumped backup, drops the collections from the target database.
--dropdoes not drop collections that are not in the backup.When the restore includes the
admindatabase,mongorestorewith--dropremoves all user credentials and replaces them with the users defined in the dump file. Therefore, in systems withauthorizationenabled,mongorestoremust be able to authenticate to an existing user and to a user defined in the dump file. Ifmongorestorecan't authenticate to a user defined in the dump file, the restoration process will fail, leaving an empty database.If a collection is dropped and recreated as part of the restore, the newly created collection has a different UUID unless
--dropis used with--preserveUUID.
--dryRunRuns
mongorestorewithout actually importing any data, returning themongorestoresummary information. Use with--verboseto produce more detailed summary information.
--fixDottedHashIndexCreates all hashed indexes on dotted fields as single field ascending indexes on the destination database.
--gssapiHostName=<hostname>Specify the hostname of a service using GSSAPI/Kerberos. Only required if the hostname of a machine does not match the hostname resolved by DNS.
This option is available only in MongoDB Enterprise.
--gssapiServiceName=<serviceName>Specify the name of the service using GSSAPI/Kerberos. Only required if the service does not use the default name of
mongodb.This option is available only in MongoDB Enterprise.
--gzipRestores from compressed files or data stream created by
mongodump --gzip.To restore from a dump directory that contains compressed files, run
mongorestorewith the--gzipoption.To restore from a compressed archive file, run
mongorestorewith both the--gzipand the--archiveoptions.
--host=<hostname><:port>, -h=<hostname><:port>Default: localhost:27017
Specifies the resolvable hostname of the MongoDB deployment. By default,
mongorestoreattempts to connect to a MongoDB instance running on the localhost on port number27017.To connect to a replica set, specify the
replSetNameand a seed list of set members, as in the following:--host=<replSetName>/<hostname1><:port>,<hostname2><:port>,<...> When specifying the replica set list format,
mongorestorealways connects to the primary.You can also connect to any single member of the replica set by specifying the host and port of only that member:
--host=<hostname1><:port> If you use IPv6 and use the
<address>:<port>format, you must enclose the portion of an address and port combination in brackets (e.g.[<address>]).Alternatively, you can also specify the hostname directly in the
URI connection string. Providing a connection string while also using--hostand specifying conflicting information will result in an error.
--keepIndexVersionPrevents
mongorestorefrom upgrading the index to the latest version during the restoration process.
--maintainInsertionOrderDefault: false
If specified,
mongorestoreinserts the documents in the order of their appearance in the input source. That is, both the bulk write batch order and document order within the batches are maintained.Specifying
--maintainInsertionOrderalso enables--stopOnErrorand setsnumInsertionWorkersPerCollectionto 1.If unspecified,
mongorestoremay perform the insertions in an arbitrary order.
--noIndexRestorePrevents
mongorestorefrom restoring and building indexes as specified in the correspondingmongodumpoutput.
--noOptionsRestorePrevents
mongorestorefrom setting the collection options, such as those specified by thecollModdatabase command, on restored collections.
--nsExclude=<namespace pattern>Specifies a namespace pattern (e.g.
"test.myCollection","reporting.*","dept*.bar") to exclude the matching namespaces from the restore. In the pattern, you can use asterisks*as wild cards. For an example of the wildcard pattern, see Restore Collections Using Wild Cards.You can specify
--nsExcludemultiple times to exclude multiple namespace patterns.If you specify both
--nsExcludeand--nsInclude, the pattern that--nsExcludespecifies takes precedence. For example, if you specify both--nsExclude="prod.*"and--nsInclude="prod.trips", no collections from theprodnamespace are restored.
--nsFrom=<namespace pattern>Use with
--nsToto rename a namespace during the restore operation.--nsFromspecifies the collection in the dump file, while--nsTospecifies the name that should be used in the restored database.--nsFromaccepts a namespace pattern as its argument. The namespace pattern permits--nsFromto refer to any namespace that matches the specified pattern.mongorestorematches the smallest valid occurence of the namespace pattern.For simple replacements, use asterisks (
*) as wild cards. Escape all literal asterisks and backslashes with a backslash. Replacements correspond linearly to matches: each asterisk in--nsFrommust correspond to an asterisk in--nsTo, and the first asterisk in--nsFrommatches the first asterisk innsTo.For more complex replacements, use dollar signs to delimit a "wild card" variable to use in the replacement. Change Collection Namespaces during Restore provides an example of complex replacements with dollar sign-delimited wild cards.
Unlike replacements with asterisks, replacements with dollar sign-delimited wild cards do not need to be linear.
--nsInclude=<namespace pattern>Specifies a namespace pattern (e.g.
"test.myCollection","reporting.*","dept*.bar") to restore only the namespaces that match the pattern. In the pattern, you can use asterisks*as wild cards. For an example of the wildcard pattern, see Restore Collections Using Wild Cards.You can specify
--nsIncludemultiple times to include multiple namespace patterns.If source directory or file (i.e. the directory/file from which you are restoring the data) does not contain data files that match the namespace pattern, no data will be restored.
For collection names that contain non-ascii characters,
mongodumpoutputs the corresponding filenames with percent-encoded names. However, to restore these collections, do not use the encoded names. Instead, use the namespace with the non-ascii characters.For example, if the dump directory contains
dump/test/caf%C3%A9s.bson, specify--nsInclude "test.cafés".If you specify both
--nsExcludeand--nsInclude, the pattern that--nsExcludespecifies takes precedence. For example, if you specify both--nsExclude="prod.*"and--nsInclude="prod.trips", no collections from theprodnamespace are restored.
--nsTo=<namespace pattern>Use with
--nsFromto rename a namespace during the restore operation.--nsTospecifies the new collection name to use in the restored database, while--nsFromspecifies the name in the dump file.--nsToaccepts a namespace pattern as its argument. The namespace pattern permits--nsToto refer to any namespace that matches the specified pattern.mongorestorematches the smallest valid occurence of the namespace pattern.For simple replacements, use asterisks (
*) as wild cards. Escape all literal asterisks and backslashes with a backslash. Replacements correspond linearly to matches: each asterisk in--nsFrommust correspond to an asterisk in--nsTo, and the first asterisk in--nsFrommatches the first asterisk innsTo.For more complex replacements, use dollar signs to delimit a "wild card" variable to use in the replacement. Change Collection Namespaces during Restore provides an example of complex replacements with dollar sign-delimited wild cards.
Unlike replacements with asterisks, replacements with dollar sign-delimited wild cards do not need to be linear.
--numInsertionWorkersPerCollection=<int>Default: 1
Specifies the number of insertion workers to run concurrently per collection.
For large imports, increasing the number of insertion workers may increase the speed of the import.
--numParallelCollections=<int>, -j=<int>Default: 4
Number of collections
mongorestoreshould restore in parallel.If you specify
-jwhen restoring a single collection,-jmaps to the--numInsertionWorkersPerCollectionoption rather than--numParallelCollections.
--objcheckForces
mongorestoreto validate all requests from clients upon receipt to ensure that clients never insert invalid documents into the database. For objects with a high degree of sub-document nesting,--objcheckcan have a small impact on performance.
--oplogFile=<path>Specifies the path to the oplog file containing oplog data for the restore. Use with
--oplogReplay.If you specify
--oplogFileand there is anoplog.bsonfile at the top level of the dump directory,mongorestorereturns an error.Warning
Use
oplogFilewith caution: manually specifying the oplog entries to apply might cause corruption and inconsistencies in the restored data.
--oplogLimit=<timestamp>Prevents
mongorestorefrom applying oplog entries with timestamp newer than or equal to<timestamp>. Specify<timestamp>values in the form of<time_t>:<ordinal>, where<time_t>is the seconds since the UNIX epoch, and<ordinal>represents a counter of operations in the oplog that occurred in the specified second.Warning
Use
oplogLimitwith caution: manually specifying the oplog entries to apply might cause corruption and inconsistencies in the restored data.You must use
--oplogLimitin conjunction with the--oplogReplayoption.
--oplogReplayAfter restoring the database dump, replays the oplog entries from an
oplog.bsonfile.To apply oplog entries from the
oplog.bsonfile in the restore, usemongorestore --oplogReplay. You can usemongodump --oplogtogether withmongorestore --oplogReplayto ensure the data is current and has all the writes that occurred during the dump operation.mongorestoresearches for any valid source for the bson file in the following locations:The top level of the dump directory, as in the case of a dump created with
mongodump --oplog.The path specified by
--oplogFile.<dump-directory>/local/oplog.rs.bson, as in the case of a dump of theoplog.rscollection in thelocaldatabase on amongodthat is a member of a replica set.
If there is an
oplog.bsonfile at the top level of the dump directory and a path specified by--oplogFile,mongorestorereturns an error.If there is an
oplog.bsonfile at the top level of the dump directory,mongorestorerestores that file as the oplog. If there are also bson files in thedump/localdirectory,mongorestorerestores them like normal collections.If you specify an oplog file using
--oplogFile,mongorestorerestores that file as the oplog. If there are also bson files in thedump/localdirectory,mongorestorerestores them like normal collections.The following message in the oplog replay output shows the number of inserts before the oplog replay. It does not include inserts performed during the replay.
0 document(s) restored successfully. 0 document(s) failed to restore. For an example of
--oplogReplay, see Use an Oplog File to Backup and Restore Data.Note
When using
mongorestorewith--oplogReplayto restore a replica set, you must restore a full dump of a replica set member created usingmongodump --oplog.mongorestorewith--oplogReplayfails if you use any of the following options to limit the data to be restored:
--password=<password>, -p=<password>Specifies a password with which to authenticate to a MongoDB database that uses authentication. Use in conjunction with the
--usernameand--authenticationDatabaseoptions.To prompt the user for the password, pass the
--usernameoption without--passwordor specify an empty string as the--passwordvalue, as in--password="".Alternatively, you can also specify the password directly in the
URI connection string. Providing a connection string while also using--passwordand specifying conflicting information will result in an error.If connecting to a MongoDB Atlas cluster using the
MONGODB-AWSauthentication mechanism, you can specify your AWS secret access key in:this field,
the
connection string, orthe
AWS_SECRET_ACCESS_KEYenvironment variable.
See Connect to a MongoDB Atlas Cluster using AWS IAM Credentials for an example of each.
Warning
On some systems, a password provided directly using the
--passwordoption may be visible to system status programs such aspsthat may be invoked by other users. Consider instead:omitting the
--passwordoption to receive an interactive password prompt, orusing the
--configoption to specify a configuration file containing the password.
<path>The directory path or BSON file name from which to restore data.
You cannot specify both the
<path>argument and the--diroption, which also specifies the dump directory, tomongorestore.
--port=<port>Default: 27017
Specifies the TCP port on which the MongoDB instance listens for client connections.
Alternatively, you can also specify the port directly in the
URI connection string. Providing a connection string while also using--portand specifying conflicting information will result in an error.
--preserveUUIDRestored collections use the UUID from the restore data instead of creating a new UUID for collections that are dropped and recreated as part of the restore.
To use
--preserveUUID, you must also include the--dropoption.
--quietRuns
mongorestorein a quiet mode that attempts to limit the amount of output.This option suppresses:
errors
output from database commands
replication activity
connection accepted events
connection closed events
--restoreDbUsersAndRolesRestore user and role definitions for the given database. See system.roles Collection and system.users Collection for more information.
Note
You can only use
--restoreDbUsersAndRoleson a database dump that was created with the--dumpDbUsersAndRolesoption.Restoring the
admindatabase by specifying--db adminautomatically restores all users and roles. You cannot use--restoreDbUsersAndRoleson theadmindatabase, and attempting to do so results in an error.
--sslEnables connection to a
mongodormongosthat has TLS/SSL support enabled.Alternatively, you can also configure TLS/SSL support directly in the
URI connection string. Providing a connection string while also using--ssland specifying conflicting information will result in an error.For more information about TLS/SSL and MongoDB, see Configure mongod and mongos for TLS/SSL and TLS/SSL Configuration for Clients.
--sslAllowInvalidCertificatesBypasses the validation checks for server certificates and allows the use of invalid certificates. When using the
allowInvalidCertificatessetting, MongoDB logs as a warning the use of the invalid certificate.Warning
Although available, avoid using the
--sslAllowInvalidCertificatesoption if possible. If the use of--sslAllowInvalidCertificatesis necessary, only use the option on systems where intrusion is not possible.Connecting to a
mongodormongosinstance without validating server certificates is a potential security risk. If you only need to disable the validation of the hostname in the TLS/SSL certificates, see--sslAllowInvalidHostnames.Alternatively, you can also disable certificate validation directly in the
URI connection string. Providing a connection string while also using--sslAllowInvalidCertificatesand specifying conflicting information will result in an error.For more information about TLS/SSL and MongoDB, see Configure mongod and mongos for TLS/SSL and TLS/SSL Configuration for Clients.
--sslAllowInvalidHostnamesDisables the validation of the hostnames in TLS/SSL certificates. Allows
mongorestoreto connect to MongoDB instances even if the hostname in their certificates do not match the specified hostname.Alternatively, you can also disable hostname validation directly in the
URI connection string. Providing a connection string while also using--sslAllowInvalidHostnamesand specifying conflicting information will result in an error.For more information about TLS/SSL and MongoDB, see Configure mongod and mongos for TLS/SSL and TLS/SSL Configuration for Clients.
--sslCAFile=<filename>Specifies the
.pemfile that contains the root certificate chain from the Certificate Authority. Specify the file name of the.pemfile using relative or absolute paths.Alternatively, you can also specify the
.pemfile directly in theURI connection string. Providing a connection string while also using--sslCAFileand specifying conflicting information will result in an error.For more information about TLS/SSL and MongoDB, see Configure mongod and mongos for TLS/SSL and TLS/SSL Configuration for Clients.
--sslCRLFile=<filename>Specifies the
.pemfile that contains the Certificate Revocation List. Specify the file name of the.pemfile using relative or absolute paths.For more information about TLS/SSL and MongoDB, see Configure mongod and mongos for TLS/SSL and TLS/SSL Configuration for Clients.
--sslPEMKeyFile=<filename>Specifies the
.pemfile that contains both the TLS/SSL certificate and key. Specify the file name of the.pemfile using relative or absolute paths.This option is required when using the
--ssloption to connect to amongodormongosthat hasCAFileenabled withoutallowConnectionsWithoutCertificates.Alternatively, you can also specify the
.pemfile directly in theURI connection string. Providing a connection string while also using--sslPEMKeyFileand specifying conflicting information will result in an error.For more information about TLS/SSL and MongoDB, see Configure mongod and mongos for TLS/SSL and TLS/SSL Configuration for Clients.
--sslPEMKeyPassword=<value>Specifies the password to de-crypt the certificate-key file (i.e.
--sslPEMKeyFile). Use the--sslPEMKeyPasswordoption only if the certificate-key file is encrypted. In all cases, themongorestorewill redact the password from all logging and reporting output.If the private key in the PEM file is encrypted and you do not specify the
--sslPEMKeyPasswordoption, themongorestorewill prompt for a passphrase. See TLS/SSL Certificate Passphrase.Alternatively, you can also specify the password directly in the
URI connection string. Providing a connection string while also using--sslPEMKeyPasswordand specifying conflicting information will result in an error.For more information about TLS/SSL and MongoDB, see Configure mongod and mongos for TLS/SSL and TLS/SSL Configuration for Clients.
Warning
On some systems, a password provided directly using the
--sslPEMKeyPasswordoption may be visible to system status programs such aspsthat may be invoked by other users. Consider using the--configoption to specify a configuration file containing the password instead.
--stopOnErrorForces
mongorestoreto halt the restore when it encounters an error.By default,
mongorestorecontinues when it encounters duplicate key and document validation errors. To ensure that the program stops on these errors, specify--stopOnError.
--uri=<connectionString>Specifies the resolvable URI connection string of the MongoDB deployment, enclosed in quotes:
--uri="mongodb://[username:password@]host1[:port1][,host2[:port2],...[,hostN[:portN]]][/[database][?options]]" Starting with version
100.0ofmongorestore, the connection string may alternatively be provided as a positional parameter, without using the--urioption:mongorestore mongodb://[username:password@]host1[:port1][,host2[:port2],...[,hostN[:portN]]][/[database][?options]] As a positional parameter, the connection string may be specified at any point on the command line, as long as it begins with either
mongodb://ormongodb+srv://. For example:mongorestore --username joe --password secret1 mongodb://mongodb0.example.com:27017 --ssl Only one connection string can be provided. Attempting to include more than one, whether using the
--urioption or as a positional argument, will result in an error.For information on the components of the connection string, see the Connection String URI Format documentation.
Note
Some components in the
connection stringmay alternatively be specified using their own explicit command-line options, such as--usernameand--password. Providing a connection string while also using an explicit option and specifying conflicting information will result in an error.Note
If using
mongorestoreon Ubuntu 18.04, you may experience acannot unmarshal DNSerror message when using SRV connection strings (in the formmongodb+srv://) with the--urioption. If so, use one of the following options instead:the
--urioption with a non-SRV connection string (in the formmongodb://)the
--hostoption to specify the host to connect to directly
Warning
On some systems, a password provided in a connection string with the
--urioption may be visible to system status programs such aspsthat may be invoked by other users. Consider instead:omitting the password in the connection string to receive an interactive password prompt, or
using the
--configoption to specify a configuration file containing the password.
--username=<username>, -u=<username>Specifies a username with which to authenticate to a MongoDB database that uses authentication. Use in conjunction with the
--passwordand--authenticationDatabaseoptions.Alternatively, you can also specify the username directly in the
URI connection string. Providing a connection string while also using--usernameand specifying conflicting information will result in an error.If connecting to a MongoDB Atlas cluster using the
MONGODB-AWSauthentication mechanism, you can specify your AWS access key ID in:this field,
the
connection string, orthe
AWS_ACCESS_KEY_IDenvironment variable.
See Connect to a MongoDB Atlas Cluster using AWS IAM Credentials for an example of each.
--verbose, -vIncreases the amount of internal reporting returned on standard output or in log files. Increase the verbosity with the
-vform by including the option multiple times, (e.g.-vvvvv.)
--writeConcern=<document>Default: majority
Specifies the write concern for each write operation that
mongorestoreperforms.Specify the write concern as a document with w options:
--writeConcern="{w:'majority'}" If the write concern is also included in the
--uri connection string, the command-line--writeConcernoverrides the write concern specified in the URI string.