000037566 - How to login to Mongodb in RSA NetWitness logs & Network 11.x

Document created by RSA Customer Support Employee on Jul 9, 2019
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000037566
Applies ToRSA Product Set: NetWitness Logs & Network
RSA Product/Service Type: Admin Server and Event Stream Analysis (ESA) 
RSA Version/Condition: 11.x
IssueHow to get into the Mongo database.
TasksExecute the command below to enter the Mongodb on the Admin server or Event Stream Analysis (ESA)

mongo admin -u <user> -p <password>

  • The only user account created is the "deploy_admin" account so this will have to be used (below is an example)
  • mongo admin -u deploy_admin -p netwitness
ResolutionThe database is now accessible

Useful commands to navigate through the database
  • This will show the different databases


      show dbs

  • Switch databases (When we logged in with "mongo admin -u <user> -p <password>" this put us in the admin database)


      use <database name>

  • Show the database collections 


      show collections

  • Look at the data in the collection, either command will work (1st command shows everything condensed and the second is formatted)


      db.<collection name>.find()




NotesBy logging into the admin database this allows you to not have to add extra parameters