What problem are you trying to solve?

Focus on the what and why of the need you have, not the how you'd like it solved.

As a cloud service provider operating in a highly regulated banking environment, we need to centrally monitor and audit all user access and administrative actions across our MongoDB Atlas organization and projects. Currently, while database-level audit logs (mongod, mongos) can be exported to S3 via Push-Based Log Export, Organization and Project Activity Feed logs—which track critical platform events like user logins, role changes, cluster modifications, and billing updates—cannot be automatically exported to our SIEM (Elastic) or long-term storage.

This creates a compliance and security gap: we are unable to correlate platform-level events (e.g., "who deleted a cluster?" or "who granted admin access?") with database-level activity in our centralized logging and monitoring system. Manual polling via the API is error-prone, unscalable, and does not meet our real-time audit and retention requirements.

I also do not find relevant documentation about the Activity Feed log retention. This does not provide a clear statement on how these activity is managed on MongoDB side. I assume that it is the same as mongod, mongos and audit logs: 30 days.

What would you like to see happen?

Describe the desired outcome or enhancement.

We would like the Organization and Project Activity Feed logs to be included in the existing Push-Based Log Export feature. Using existing Push-based Log Export Connector will be fine for us (including S3).

Why is this important to you or your team?

Explain how the request adds value or solves a business need.

We need to comply with regulatory compliance and it could be a good fit to comply local regualtions. If this is not solved, I will be difficult to make MongoDB acceptable for our internal compliance as well as ou customer compliance service.

What steps, if any, are you taking today to manage this problem?

Pull Organization Activity Feeds periodically via a custom script.