# Shiiping audit logs for DB with no connector available in Integrations

**URL:** <https://discuss.elastic.co/t/shiiping-audit-logs-for-db-with-no-connector-available-in-integrations/354232>\
**Category:** SIEM\
**Created:** [February 27, 2024, 1:24pm UTC](https://discuss.elastic.co/t/shiiping-audit-logs-for-db-with-no-connector-available-in-integrations/354232 "2024-02-27T13:24:29Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Nouman\_Ahmed](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nouman_ahmed/32/132033_2.png) [@Nouman\_Ahmed](https://discuss.elastic.co/u/Nouman_Ahmed)\
**Post date:** [February 27, 2024, 1:24pm UTC](https://discuss.elastic.co/t/shiiping-audit-logs-for-db-with-no-connector-available-in-integrations/354232/1 "2024-02-27T13:24:29Z")

</div>

I have question why there are no connectors available for DBs like mongoDB, SQLite etc to capture audit logs while they are availble for SQL server, mysql?? and if there is no connector avaible to capture audit logs of mongoDB in elastic integrations then how can i do that??

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [February 27, 2024, 2:13pm UTC](https://discuss.elastic.co/t/shiiping-audit-logs-for-db-with-no-connector-available-in-integrations/354232/2 "2024-02-27T14:13:22Z")

</div>

> [@Nouman\_Ahmed](#):
>
> and if there is no connector avaible to capture audit logs of mongoDB in elastic integrations then how can i do that??

You need to build something like a python script, to extract those logs and then you could send it directly to Elasticsearch or save to a file and read it with Elastic Agent.

---

<div class="post-metadata">

**Author:** ![Nouman\_Ahmed](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nouman_ahmed/32/132033_2.png) [@Nouman\_Ahmed](https://discuss.elastic.co/u/Nouman_Ahmed)\
**Post date:** [February 28, 2024, 10:04am UTC](https://discuss.elastic.co/t/shiiping-audit-logs-for-db-with-no-connector-available-in-integrations/354232/3 "2024-02-28T10:04:46Z")

</div>

Can you please share any resource on this or any community repo for .py scripts?

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [February 28, 2024, 11:40am UTC](https://discuss.elastic.co/t/shiiping-audit-logs-for-db-with-no-connector-available-in-integrations/354232/4 "2024-02-28T11:40:25Z")

</div>

> [@Nouman\_Ahmed](#):
>
> Can you please share any resource on this or any community repo for .py scripts?

Unfortunately I do not have any information about this.

Also, I don't think that the Community Edtion of MongoDB provides any auditing log, I know that Atlas has audit log and you can read the MongoDB documentation on how to extract those logs.

---

<div class="post-metadata">

**Author:** ![wsouza](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wsouza/32/92547_2.png) [@wsouza](https://discuss.elastic.co/u/wsouza)\
**Post date:** [February 28, 2024, 2:58pm UTC](https://discuss.elastic.co/t/shiiping-audit-logs-for-db-with-no-connector-available-in-integrations/354232/5 "2024-02-28T14:58:53Z")

</div>

Elastic Agent has the [MongoDB | Documentation](https://docs.elastic.co/en/integrations/mongodb) integration for collecting logs and metrics from mongodb. Does this integration not meet your use case? As for SQLite, there is a Logstash plugin [Sqlite input plugin | Logstash Reference [8.12] | Elastic](https://www.elastic.co/guide/en/logstash/current/plugins-inputs-sqlite.html).

Another alternative would be to use the Custom Logs integration [Custom Logs | Documentation](https://docs.elastic.co/integrations/log) or collect directly through Filebeat. Then, parsing can be done with ingest pipeline.

 ![print1](https://us1.discourse-cdn.com/elastic/original/3X/8/a/8adcfae196e76556f87fa104119131ee79d4f8d3.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 27, 2024, 2:59pm UTC](https://discuss.elastic.co/t/shiiping-audit-logs-for-db-with-no-connector-available-in-integrations/354232/6 "2024-03-27T14:59:29Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
