[receiver/mongodbatlas] Support collecting Access Logs from Atlas Clusters

[dehaansa]

Component(s)

receiver/mongodbatlas

Is your feature request related to a problem? Please describe.

MongoDB Atlas allows you to request Access Logs for a cluster, and these would be useful log events to collect.

Describe the solution you'd like

Collect Access Log entries similarly to the same way the receiver collects MongoDB Atlas project & organization events, by polling the API endpoint for Access Logs.

A configuration for this might look like the following. While it shares some concepts with Event collection in the MongoDBAtlas receiver, the configuration options differ so this will be a separate subsection of the configuration.

mongodbatlas:
  public_key: "my-public-key"
  private_key: "my-private-key"
  access_logs:
    projects:
      - name: Project 0
        include_clusters: [Cluster0] # Similar to events, if this is not provided all clusters will be collected
    poll_interval: 1m
    auth_result: false # The API allows you to specify if you only want successful authentication attempts or only failed authentication attempts

Example Auth Result:

{
    "authResult": false,
    "authSource": "admin",
    "failureReason": "UserNotFound: User \"test@admin\" not found",
    "groupId": "groupID",
    "hostname": "host.mongodb.net",
    "ipAddress": "555.555.555.555",
    "logLine": "{\"t\":{\"$date\":\"2023-04-26T02:38:56.454+00:00\"},\"s\":\"I\",  \"c\":\"ACCESS\",   \"id\":20249,   \"ctx\":\"conn371\",\"msg\":\"Authentication failed\",\"attr\":{\"mechanism\":\"SCRAM-SHA-1\",\"speculative\":true,\"principalName\":\"test\",\"authenticationDatabase\":\"admin\",\"remote\":\"555.555.555.555:56444\",\"extraInfo\":{},\"error\":\"UserNotFound: User \\\"test@admin\\\" not found\"}}",
    "timestamp": "Wed Apr 26 02:38:56 GMT 2023",
    "username": "test"
},

The logLine will be parsed to json and set as the log body, while the other parameters will be marked as log attributes. Resource attributes will be added similar to the existing events/logs receivers (cluster, project, etc)

[github-actions]

Pinging code owners:

• receiver/mongodbatlas: @djaglowski @schmikei

See Adding Labels via Comments if you do not have permissions to add labels yourself.