Databricks Audit Logs, Where the log files are stored? How to read them?

Question

Databricks Audit Logs, Where the log files are stored? How to read them?

Mohammad Saber 591

Hi,

I want to access the Databricks Audit Logs to check user activity. For example, the number of times that a table was viewed by a user.

I have a few questions in this regard.

Where the log files are stored? Are they stored on DBFS?

Can I read log files and save them as a table (let's say a delta table)?

If Log files are saved somewhere like DBFS, I might be able to read files by SQL language.

I'd like to know if there is any way to get Logs as a Databricks table. I mean, saving the Logs as a table.

Also, I want it to work continuously; adding new logs to the table when a new event happens (not just one time).

I am not sure if I can use SQL language for this purpose or not (instead of Rest API).

Any idea how to do that?

PRADEEPCHEEKATLA 91,946 Reputation points

2023-02-27T07:20:03.34+00:00

@Mohammad Saber Just checking in to see if the below answer helped. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
PRADEEPCHEEKATLA 91,946 Reputation points

2023-03-02T03:17:55.84+00:00

@Mohammad Saber Glad to know that the below response was helpful. Thank you for marking this answer as accepted. This will help others find useful answers faster.

Please feel free to take a survey on the relevant answer. You can help us improve by leaving feedback verbatim.

Have a good day!

Regards,

PRADEEPCHEEKATLA-MSFT

2 answers

Your answer

PRADEEPCHEEKATLA 91,946 Reputation points

2023-02-27T07:20:03.34+00:00

@Mohammad Saber Just checking in to see if the below answer helped. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
PRADEEPCHEEKATLA 91,946 Reputation points

2023-03-02T03:17:55.84+00:00

@Mohammad Saber Glad to know that the below response was helpful. Thank you for marking this answer as accepted. This will help others find useful answers faster.

Please feel free to take a survey on the relevant answer. You can help us improve by leaving feedback verbatim.

Have a good day!

Regards,

PRADEEPCHEEKATLA-MSFT

Answer 1

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

5 deleted comments

Comments have been turned off. Learn more

Answer 2

PRADEEPCHEEKATLA 91,946

Hello @Mohammad Saber

For SQL persona, you don't get logs ingested into Log Analytics.
Monitor a SQL warehouse: You can view the number of queries handled by the warehouse and the number of clusters allocated to the warehouse.

Click SQL Warehouses in the sidebar.
Click a SQL warehouse.
Click Monitoring.

ADB-SQL-Query

OR

Directly from Query History:

User's image

Hope this helps.

PRADEEPCHEEKATLA 91,946 Reputation points

2023-03-01T08:12:34.1266667+00:00

@Mohammad Saber

Following up to see if the above suggestion was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.