- Packetbeat Reference: other versions:
- Overview
- Getting started with Packetbeat
- Setting up and running Packetbeat
- Upgrading Packetbeat
- Configuring Packetbeat
- Set traffic capturing options
- Set up flows to monitor network traffic
- Specify which transaction protocols to monitor
- Specify which processes to monitor
- Specify general settings
- Configure the internal queue
- Configure the output
- Specify SSL settings
- Filter and enhance the exported data
- Parse data by using ingest node
- Export GeoIP Information
- Set up project paths
- Set up the Kibana endpoint
- Load the Kibana dashboards
- Load the Elasticsearch index template
- Configure logging
- Use environment variables in the configuration
- YAML tips and gotchas
- HTTP Endpoint
- packetbeat.reference.yml
- Exported fields
- AMQP fields
- Beat fields
- Cassandra fields
- Cloud provider metadata fields
- Common fields
- DHCPv4 fields
- DNS fields
- Docker fields
- Flow Event fields
- Host fields
- HTTP fields
- ICMP fields
- Kubernetes fields
- Memcache fields
- MongoDb fields
- MySQL fields
- NFS fields
- PostgreSQL fields
- Raw fields
- Redis fields
- Thrift-RPC fields
- TLS fields
- Transaction Event fields
- Measurements (Transactions) fields
- Monitoring Packetbeat
- Securing Packetbeat
- Visualizing Packetbeat data in Kibana
- Troubleshooting
- Contributing to Beats
Capture MongoDB traffic
editCapture MongoDB traffic
editThe following settings are specific to the MongoDB protocol. Here is a sample
configuration for the mongodb section of the packetbeat.yml config file:
packetbeat.protocols: - type: mongodb send_request: true send_response: true max_docs: 0 max_doc_length: 0
Configuration options
editThe max_docs and max_doc_length settings are useful for limiting the amount
of data Packetbeat indexes in the response fields.
Also see Common protocol options.
max_docs
editThe maximum number of documents from the response to index in the response field. The
default is 10. You can set this to 0 to index an unlimited number of documents.
Packetbeat adds a [...] line at the end to signify that there were additional documents
that weren’t saved because of this setting.
max_doc_length
editThe maximum number of characters in a single document indexed in the response
field. The default is 5000. You can set this to 0 to index an unlimited number
of characters per document.
If the document is trimmed because of this setting, Packetbeat adds the string ...
at the end of the document.
Note that limiting documents in this way means that they are no longer correctly formatted JSON objects.
On this page