Audit logs for events adding and deleting credentials for Databricks remote history service.
Table attributes
Attribute
Value
Resource types
microsoft.databricks/workspaces
Categories
Azure Resources
Solutions
LogManagement
Basic log
No
Ingestion-time transformation
Yes
Sample Queries
-
Columns
Column
Type
Description
ActionName
string
The action of the request.
_BilledSize
real
The record size in bytes
Category
string
The service that logged the request.
Identity
string
Information about the user that makes the requests.
_IsBillable
string
Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account
LogId
string
The unique identifier for the log message that can be used to deduplicate them.
OperationName
string
The action, such as login, logout, read, write, etc.
OperationVersion
string
The schema version of the Databricks operation-based diagnostic log format.
RequestId
string
The unique request ID.
RequestParams
string
Parameter key-value pairs used in the event.
_ResourceId
string
A unique identifier for the resource that the record is associated with
Response
string
The HTTP response to the request, including error message (if applicable), result, and statusCode.
ServiceName
string
The service of the source request.
SessionId
string
Session ID of the action.
SourceIPAddress
string
The IP address of the source request.
SourceSystem
string
The type of agent the event was collected by. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics
_SubscriptionId
string
A unique identifier for the subscription that the record is associated with
TenantId
string
The Log Analytics workspace ID
TimeGenerated
datetime
The timestamp of the action (UTC).
Type
string
The name of the table
UserAgent
string
The browser or API client used to make the request.