Query a Legacy Backup Snapshot
On this page
Effective 23 March 2020, all new clusters can only use Cloud Backups.
When you upgrade from 4.0 to 4.2, your backup system upgrades to cloud backup if it is currently set to legacy backup. After this upgrade:
- All your existing legacy backup snapshots remain available. They expire over time in accordance with your retention policy.
- Your backup policy resets to the default schedule. If you had a custom backup policy in place with legacy backups, you must re-create it with the procedure outlined in the Cloud Backup documentation.
Atlas supports querying a legacy backup snapshot. This functionality allows you to query specific legacy backup snapshot. You can use the queryable backups to:
- Restore a subset of data within the MongoDB cluster.
- Compare previous versions of data against the current data.
- Identify the best point in time to restore a system by comparing data from multiple legacy backups.
You must have the Project Owner role for an Atlas
project to query a snapshot for a cluster in that project.
Considerations
- Atlas does not support querying Cloud Backups.
Atlas provisions these queryable snapshots as read-only MongoDB instances.
ImportantThese instances are available for up to 24 hours.Query restrictions:
- You cannot run map-reduce operations.
- You cannot run queries that requires disk usage, such as running
aggregation with the
allowDiskUseoption to perform large sort operations.
Connections to these instances are over TLS/SSL and require a X.509 authentication. Atlas provides:
- An executable to create a tunnel which handles the connection, including the TLS/SSL and the X.509 authentication.
- X.509 certificates if you want to handle the connection details manually, including the TLS/SSL and the X.509 authentication.
Query Backup (Use Tunnel to Connect)
The tunnel handles the security (TLS/SSL and X.509 authentication) for connecting to the instance.
Go to Backup view and click the Overview tab.
For the cluster whose backup you want to query, click the ellipsis button under Options column and select Query.
You can also click the cluster to view its snapshots and click the Query button under the Actions column.
Follow the prompts to query a backup snapshot.
- Select the snapshot to query and click Next.
- Start the process to query a snapshot. If prompted for your password, enter your password to verify.
- Select Backup Tunnel as the connection method to the queryable snapshot.
- Select your Platform and download.
- Uncompress the downloaded file.
Open a terminal or command prompt and go to the uncompressed <tunnel> directory. Run the executable to start the tunnel.
The default port for the tunnel is
27017. To change the port, use the--localflag, as in the following example:./<tunnel executable> --local localhost:27020 NoteIf you change the port, you must include the port information when connecting.
Use the
mongoshell or a MongoDB driver to connect to the backup via the tunnel.- If connecting locally from the same machine as where the tunnel is running, you do not need to specify a connection string or host information. Otherwise, specify a connection string or host information for the machine where the tunnel is running.
- If you have changed the port that the tunnel is listening on, you must specify the port information when connecting.
Once you have finished querying this snapshot, you can terminate the queryable instance:
- Go to the Restores & Downloads tab and hover over the Status column for the cluster.
- Click Cancel.
Query Backup (Handle TLS and Authentication Manually)
The X.509 certificates are valid for 24 hours.
Go to Backup view and click the Overview tab.
For the cluster whose backup you want to query, click the ellipsis button under Options column and select Query.
You can also click the cluster to view its snapshots and click the Query button under the Actions column.
Follow the prompts to query a backup snapshot.
- Select the snapshot to query and click Next.
- Start the process to query a snapshot. If prompted for your password, enter your password to verify.
- Select Connect Manually as the connection method to the queryable snapshot.
- Download the X.509 client PEM file.
- Download the Certificate Authority (CA) PEM file.
Use
mongoshor a MongoDB driver to connect to the queryable backup host. To connect, you must specify the hostname and port, the TLS/SSL option, and the X.509 certificates.For example, if using
mongoshto connect to the instance:smongosh my-queryable-backup-host.mongodb.com:27217 --ssl --sslPEMKeyFile <client certificate> --sslCAFile mms-backup-ca.pem
Once you have finished querying this snapshot, you can terminate the queryable instance:
- Go to the Restores & Downloads tab and hover over the Status column for the cluster.
- Click Cancel.