How to login to Mongodb in RSA NetWitness logs & Network 11.x

Issue

How to get into the Mongo database.

Tasks

Execute the command below to enter the Mongodb on the Admin server or Event Stream Analysis (ESA)

• The only user account created is the "deploy_admin" account so this will have to be used (below is an example)
• mongo admin -u deploy_admin -p netwitness

Resolution

The database is now accessible

Useful commands to navigate through the database

• This will show the different databases
  • show dbs
    
• Switch databases (When we logged in with "mongo admin -u -p " this put us in the admin database)
  • use <database name>
• Show the database collections 
  • show collections
• Look at the data in the collection, either command will work (1st command shows everything condensed and the second is formatted)
  • db.<collection name>.find()
  • db.<collection>.find().pretty()
    
     

Notes

By logging into the admin database this allows you to not have to add extra parameters

Product Details

RSA Product Set: NetWitness Logs & Network
RSA Product/Service Type: Admin Server and Event Stream Analysis (ESA) 
RSA Version/Condition: 11.x

Summary

This article will show the best way to login to mongo on any server

Approval Reviewer Queue

RSA NetWitness Suite Approval Queue