/ /

Alert Event Types

Agent

Alert Type	Alert Message	Scopes	Alertable?
`AUTOMATION_AGENT_DOWN`	Automation is down	Project, Global	yes
`AUTOMATION_AGENT_UP`	Automation is up	Project, Global	yes
`BACKUP_AGENT_CONF_CALL_FAILURE`	Backup has too many conf call failures	Project, Global	yes
`BACKUP_AGENT_DOWN`	Backup is down	Project, Global	yes
`BACKUP_AGENT_UP`	Backup is up	Project, Global	yes
`BACKUP_AGENT_VERSION_BEHIND`	Backup does not have the latest version	Project, Global	yes
`BACKUP_AGENT_VERSION_CURRENT`	Backup has the latest version	Project, Global	yes
`MONITORING_AGENT_DOWN`	Monitoring is down	Project, Global	yes
`MONITORING_AGENT_UP`	Monitoring is up	Project, Global	yes
`MONITORING_AGENT_VERSION_BEHIND`	Monitoring does not have the latest version	Project, Global	yes
`MONITORING_AGENT_VERSION_CURRENT`	Monitoring has the latest version	Project, Global	yes
`NEW_AGENT`	New agent	Project, Global	yes

Alerts

Alert Type	Alert Message	Scopes	Alertable?
`WEBHOOK_TEMPLATE_RENDER_FAILED`	A webhook alert notification template failed to render, so the default payload was sent instead. Review the webhook template in your alert settings.	Project, Global	yes

Automation Configuration

Alert Type	Alert Message	Scopes	Alertable?
`AUTOMATION_CONFIG_PUBLISHED_AUDIT`	Deployment configuration published	Project, Global	yes

Backup

Alert Type	Alert Message	Scopes	Alertable?
`BAD_CLUSTERSHOTS`	Backup has possibly inconsistent cluster snapshots	Project, Global	yes
`CLUSTER_DENYLIST_UPDATED_AUDIT`	Excluded namespaces were modified for cluster	Project, Global	yes
`CLUSTER_CHECKKPOINT_UPDATED_AUDIT`	Checkpoint interval updated for cluster	Project, Global	yes
`CLUSTER_CREDENTIAL_UPDATED_AUDIT`	Backup authentication credentials updated for cluster	Project, Global	yes
`CLUSTER_SNAPSHOT_SCHEDULE_UPDATED_AUDIT`	Snapshot schedule updated for cluster	Project, Global	yes
`CLUSTER_STATE_CHANGED_AUDIT`	Cluster backup state is now	Project, Global	yes
`CLUSTER_STORAGE_ENGINE_UPDATED_AUDIT`	Cluster storage engine has been updated	Project, Global	yes
`CLUSTERSHOT_DELETED_AUDIT`	Cluster snapshot has been deleted	Project, Global	yes
`CLUSTERSHOT_EXPIRY_UPDATED_AUDIT`	Clustershot expiry has been updated.	Project, Global	yes
`CONSISTENT_BACKUP_CONFIGURATION`	Backup configuration is consistent	Project, Global	yes
`GOOD_CLUSTERSHOT`	Backup has a good clustershot	Project, Global	yes
`INCONSISTENT_BACKUP_CONFIGURATION`	Inconsistent backup configuration has been detected	Project, Global	yes
`INITIAL_SYNC_FINISHED_AUDIT`	Backup initial sync finished	Project, Global	yes
`INITIAL_SYNC_STARTED_AUDIT`	Backup initial sync started	Project, Global	yes
`OPLOG_BEHIND`	Backup oplog is behind	Project, Global	yes
`OPLOG_CURRENT`	Backup oplog is current	Project, Global	yes
`RESTORE_REQUESTED_AUDIT`	A restore has been requested	Project, Global	yes
`RESYNC_PERFORMED`	Backup has been resynced	Project, Global	yes
`RESYNC_REQUIRED`	Backup requires a resync	Project, Global	yes
`RS_DENYLIST_UPDATED_AUDIT`	Excluded namespaces were modified for replica set	Project, Global	yes
`RS_CREDENTIAL_UPDATED_AUDIT`	Backup authentication credentials updated for replica set	Project, Global	yes
`RS_ROTATE_MASTER_KEY_AUDIT`	A master key rotation has been requested for a replica set.	Project, Global	yes
`RS_SNAPSHOT_SCHEDULE_UPDATED_AUDIT`	Snapshot schedule updated for replica set	Project, Global	yes
`RS_STATE_CHANGED_AUDIT`	Replica set backup state is now	Project, Global	yes
`RS_STORAGE_ENGINE_UPDATED_AUDIT`	Replica set storage engine has been updated	Project, Global	yes
`SNAPSHOT_DELETED_AUDIT`	Snapshot has been deleted	Project, Global	yes
`SNAPSHOT_EXPIRY_UPDATED_AUDIT`	Snapshot expiry has been updated.	Project, Global	yes
`SYNC_PENDING_AUDIT`	Backup sync is pending	Project, Global	yes
`SYNC_REQUIRED_AUDIT`	Backup sync has been initiated	Project, Global	yes

BI Connector

Alert Type	Alert Message	Scopes	Alertable?
`BI_CONNECTOR_DOWN`	BI Connector is down	Project, Global	yes
`BI_CONNECTOR_UP`	BI Connector is up	Project, Global	yes

Cluster

`Alert Type`	Alert Message	Scopes	Alertable?
`CLUSTER_MONGOS_IS_MISSING`	Cluster is missing an active mongos	Project, Global	yes
`CLUSTER_MONGOS_IS_PRESENT`	Cluster has an active mongos	Project, Global	yes
`SHARD_ADDED`	Shard added	Project, Global	yes
`SHARD_REMOVED`	Shard removed	Project, Global	yes

Data Explorer Accessed

Alert Type	Alert Message	Scopes	Alertable?
`DATA_EXPLORER`	User performed a Data Explorer read-only operation	Project, Global	yes
`DATA_EXPLORER_CRUD`	User performed a Data Explorer CRUD operation, which modifies data	Project, Global	yes

Host

Alert Type	Alert Message	Scopes	Alertable?
`ADD_HOST_AUDIT`	Host added	Project, Global	yes
`ADD_HOST_TO_REPLICA_SET_AUDIT`	Host added to replica set	Project, Global	yes
`ATTEMPT_KILLOP_AUDIT`	Attempted to kill operation	Project, Global	no
`ATTEMPT_KILLSESSION_AUDIT`	Attempted to kill session	Project, Global	no
`DB_PROFILER_DISABLE_AUDIT`	Database profiling disabled	Project, Global	no
`DB_PROFILER_ENABLE_AUDIT`	Database profiling enabled	Project, Global	no
`DELETE_HOST_AUDIT`	Host removed	Project, Global	yes
`DISABLE_HOST_AUDIT`	Host disabled	Project, Global	no
`HIDE_AND_DISABLE_HOST_AUDIT`	Host disabled and hidden	Project, Global	no
`HIDE_HOST_AUDIT`	Host hidden	Project, Global	no
`HOST_DOWN`	Host is down	Project, Global	yes
`HOST_DOWNGRADED`	Host has been downgraded	Project, Global	no
`HOST_IP_CHANGED_AUDIT`	Host IP address changed	Project, Global	no
`HOST_NOW_PRIMARY`	Host is now primary	Project, Global	no
`HOST_NOW_SECONDARY`	Host is now secondary	Project, Global	no
`HOST_NOW_STANDALONE`	Host is now a standalone	Project, Global	no
`HOST_RECOVERED`	Host has recovered	Project, Global	no
`HOST_RECOVERING`	Host is recovering	Project, Global	yes
`HOST_RESTARTED`	Host has restarted	Project, Global	yes
`HOST_ROLLBACK`	Host experienced a rollback	Project, Global	yes
`HOST_SECURITY_CHECKUP_NOT_MET`	Authentication or TLS is disabled.	Project, Global	no
`HOST_SSL_CERTIFICATE_CURRENT`	Host's SSL certificate is current	Project, Global	no
`HOST_SSL_CERTIFICATE_STALE`	Host's SSL certificate will expire within 30 days	Project, Global	yes
`HOST_UP`	Host is up	Project, Global	no
`HOST_UPGRADED`	Host has been upgraded	Project, Global	no
`INSIDE_METRIC_THRESHOLD`	Inside metric threshold	Project, Global	no
`NEW_HOST`	Host is new	Project, Global	no
`OUTSIDE_METRIC_THRESHOLD`	Outside metric threshold	Project, Global	yes
`PAUSE_HOST_AUDIT`	Host paused	Project, Global	no
`REMOVE_HOST_FROM_REPLICA_SET_AUDIT`	Host removed from replica set	Project, Global	yes
`RESUME_HOST_AUDIT`	Host resumed	Project, Global	no
`UNDELETE_HOST_AUDIT`	Host undeleted	Project, Global	yes
`VERSION_BEHIND`	Host does not have the latest version	Project, Global	yes
`VERSION_CHANGED`	Host version changed	Project, Global	no
`VERSION_CURRENT`	Host has the latest version	Project, Global	no

Organization

Alert Type	Alert Message	Scopes	Alertable?
`ALL_ORG_USERS_HAVE_MFA`	Organization users have two-factor authentication enabled	Organization, Global	yes
`ORG_API_KEY_ADDED`	API key has been added	Organization	yes
`ORG_API_KEY_DELETED`	API key has been deleted	Organization	yes
`ORG_EMPLOYEE_ACCESS_RESTRICTED`	MongoDB Production Support Employees restricted from accessing Atlas backend infrastructure for any Atlas cluster in this organization (You may grant a 24 hour bypass to the access restriction at the Atlas cluster level)	Organization, Global	yes
`ORG_EMPLOYEE_ACCESS_UNRESTRICTED`	MongoDB Production Support Employees unrestricted from accessing Atlas backend infrastructure for any Atlas cluster in this organization	Organization, Global	yes
`ORG_PUBLIC_API_ACCESS_LIST_NOT_REQUIRED`	IP Access List for Public API Not Required	Organization, Global	yes
`ORG_PUBLIC_API_ACCESS_LIST_REQUIRED`	Require IP Access List for Public API Enabled	Organization, Global	yes
`ORG_RENAMED`	Organization has been renamed	Organization, Global	yes
`ORG_TWO_FACTOR_AUTH_OPTIONAL`	Two-factor Authentication Optional	Organization, Global	yes
`ORG_TWO_FACTOR_AUTH_REQUIRED`	Two-factor Authentication Required	Organization, Global	yes
`ORG_USERS_WITHOUT_MFA`	Organization users do not have two-factor authentication enabled	Organization, Global	yes

Project

Alert Type	Alert Message	Scopes	Alertable?
`ALL_USERS_HAVE_MULTI_FACTOR_AUTH`	Users have two-factor authentication enabled	Project, Global	yes
`USERS_WITHOUT_MULTI_FACTOR_AUTH`	Users do not have two-factor authentication enabled	Project, Global	yes

Replica Set

`Alert Type`	Alert Message	Scopes	Alertable?
`CONFIGURATION_CHANGED`	Replica set has an updated configuration	Project, Global	yes
`ENOUGH_HEALTHY_MEMBERS`	Replica set has enough healthy members	Project, Global	yes
`MEMBER_ADDED`	Replica set member added	Project, Global	yes
`MEMBER_REMOVED`	Replica set member removed	Project, Global	yes
`MULTIPLE_PRIMARIES`	Replica set elected multiple primaries	Project, Global	yes
`NO_PRIMARY`	Replica set has no primary	Project, Global	yes
`ONE_PRIMARY`	Replica set elected one primary	Project, Global	yes
`PRIMARY_ELECTED`	Replica set elected a new primary	Project, Global	yes
`TOO_FEW_HEALTHY_MEMBERS`	Replica set has too few healthy members	Project, Global	yes
`TOO_MANY_ELECTIONS`	Replica set has too many election events	Project, Global	yes
`TOO_MANY_UNHEALTHY_MEMBERS`	Replica set has too many unhealthy members	Project, Global	yes

Team

Alert Type	Alert Message	Scopes	Alertable?
`TEAM_ADDED_TO_GROUP`	Team added to project	Organization, Project, Global	yes
`TEAM_CREATED`	Team created	Organization, Global	yes
`TEAM_DELETED`	Team deleted	Organization, Global	yes
`TEAM_NAME_CHANGED`	Team name changed	Organization, Global	yes
`TEAM_REMOVED_FROM_GROUP`	Team removed from project	Organization, Project, Global	yes
`TEAM_ROLES_MODIFIED`	Team roles modified in project	Organization, Project, Global	yes
`TEAM_UPDATED`	Team updated	Organization, Global	yes
`USER_ADDED_TO_TEAM`	User added to team	Organization, Global	yes

User

Alert Type	Alert Message	Scopes	Alertable?
`INVITED_TO_GROUP`	User was invited to project	Project, Global	yes
`INVITED_TO_ORG`	User was invited to organization	Organization, Global	yes
`JOIN_GROUP_REQUEST_APPROVED_AUDIT`	Request to join project was approved	Project, Global	yes
`JOIN_GROUP_REQUEST_DENIED_AUDIT`	Request to join project was denied	Project, Global	yes
`JOINED_GROUP`	User joined the project	Project, Global	yes
`JOINED_ORG`	User joined the organization	Organization, Global	yes
`JOINED_TEAM`	User joined the team	Organization, Global	yes
`REMOVED_FROM_GROUP`	User left the project	Project, Global	yes
`REMOVED_FROM_ORG`	User left the organization	Organization, Global	yes
`REMOVED_FROM_TEAM`	User left the team	Organization, Global	yes
`REQUESTED_TO_JOIN_GROUP`	User requested to join project	Project, Global	yes
`USER_ROLES_CHANGED_AUDIT`	User had their role changed	Project, Organization, Global	yes

Back

Database Commands

Audit Events