000037566 - How to login to Mongodb in RSA NetWitness logs & Network 11.x

Document created by RSA Customer Support Employee on Jul 9, 2019
Version 1Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000037566
Applies ToRSA Product Set: NetWitness Logs & Network
RSA Product/Service Type: Admin Server and Event Stream Analysis (ESA) 
RSA Version/Condition: 11.x
IssueHow to get into the Mongo database.
TasksExecute the command below to enter the Mongodb on the Admin server or Event Stream Analysis (ESA)

mongo admin -u <user> -p <password>


  • The only user account created is the "deploy_admin" account so this will have to be used (below is an example)
  • mongo admin -u deploy_admin -p netwitness
ResolutionThe database is now accessible

Useful commands to navigate through the database
  • This will show the different databases

    •   

      show dbs

       
  • Switch databases (When we logged in with "mongo admin -u <user> -p <password>" this put us in the admin database)

    •   

      use <database name>

       
  • Show the database collections 

    •   

      show collections

       
  • Look at the data in the collection, either command will work (1st command shows everything condensed and the second is formatted)

    •   

      db.<collection name>.find()

       

    •   

      db.<collection>.find().pretty()

       
         
NotesBy logging into the admin database this allows you to not have to add extra parameters

Attachments

    Outcomes