A collection to defend MongoDB against common attacks:

• MongoDB parser
• MongoDB brute-force & enumeration detection

MongoDB version 4.4 or higher is required.

Example acquisition for a docker container:

---
source: docker
container_name:
 - my_container_name
labels:
  type: mongodb

or for a log file:

---
filenames:
 - /var/log/mongodb/mongodb.log
labels:
  type: mongodb

Depending on your installation method, paths to log files might change.