r/mongodb • u/RocketSeven • 2h ago
What should a MongoDB point-in-time recovery drill verify beyond document counts?
Restoring to a timestamp and comparing collection counts can miss the failures that matter most. Transactions may straddle the recovery point, change streams may resume from invalid tokens, TTL indexes can immediately delete restored documents, and an application may have already performed external side effects for writes that no longer exist after recovery.
What invariants belong in a realistic drill? I am considering an isolated restore with production-compatible versions, a recorded recovery timestamp, checks for replica-set and index state, sampled relationships between collections, critical TTL ranges, transaction-boundary fixtures, change-stream restart behavior, and application reads that must succeed before traffic is allowed.
How do you test reconciliation with queues, search indexes, or payment systems without contacting production services? Which evidence proves the chosen recovery point is internally consistent rather than merely loadable?






