<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Inquiry regarding Query History and Audit Logs for Databricks Lakebase in Lakebase Discussions</title>
    <link>https://community.databricks.com/t5/lakebase-discussions/inquiry-regarding-query-history-and-audit-logs-for-databricks/m-p/157597#M105</link>
    <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.databricks.com/t5/user/viewprofilepage/user-id/228048"&gt;@POCUSER&lt;/a&gt;,&lt;/P&gt;
&lt;P data-pm-slice="1 1 []"&gt;I’m not aware of any public documentation that explicitly confirms that every request sent through the &lt;A href="https://docs.databricks.com/aws/en/oltp/projects/data-api" rel="noopener noreferrer nofollow" target="_blank"&gt;Lakebase Data API&lt;/A&gt; is captured in system.query.history or exposed through a dedicated per-request audit log.&lt;/P&gt;
&lt;P&gt;A practical way to validate it is to run a simple test query through the Data API and then check system.query.history. The public docs for that table currently describe coverage for SQL warehouses and serverless compute, so testing is the best way to confirm whether Lakebase Data API activity appears there in your environment.&lt;/P&gt;
&lt;P&gt;It is also worth checking system.access.audit together with the &lt;A href="https://docs.databricks.com/aws/en/admin/account-settings/audit-logs" rel="noopener noreferrer nofollow" target="_blank"&gt;audit log reference&lt;/A&gt; to see whether any Lakebase-related control-plane events are emitted there.&lt;/P&gt;
&lt;P class="wnfdntf _1ibi0s3f5 _1ibi0s3ce _1ibi0s3ea"&gt;If you need a definitive answer specifically for compliance, such as whether full query text, caller identity, and failed request details are logged for Lakebase Data API requests, I’d recommend opening a Databricks support case. Some of the Lakebase observability surfaces are still evolving, so support is the best route for confirmed guidance on the current supported behaviour.&lt;/P&gt;
&lt;P class="p1"&gt;&lt;FONT size="2" color="#FF6600"&gt;&lt;STRONG&gt;&lt;I&gt;If this answer resolves your question, could you mark it as “Accept as Solution”? That helps other users quickly find the correct fix.&lt;/I&gt;&lt;/STRONG&gt;&lt;/FONT&gt;&lt;I&gt;&lt;/I&gt;&lt;/P&gt;
&lt;P class="wnfdntf _1ibi0s3f5 _1ibi0s3ce _1ibi0s3ea"&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Mon, 25 May 2026 11:40:21 GMT</pubDate>
    <dc:creator>Ashwin_DSA</dc:creator>
    <dc:date>2026-05-25T11:40:21Z</dc:date>
    <item>
      <title>Inquiry regarding Query History and Audit Logs for Databricks Lakebase</title>
      <link>https://community.databricks.com/t5/lakebase-discussions/inquiry-regarding-query-history-and-audit-logs-for-databricks/m-p/157576#M103</link>
      <description>&lt;DIV class=""&gt;We are using &lt;STRONG&gt;Lakebase Data API (HTTP Endpoint)&lt;/STRONG&gt; to execute queries and need to verify the audit log capabilities for compliance. Could you please clarify:&lt;/DIV&gt;&lt;OL class=""&gt;&lt;LI&gt;&lt;SPAN class=""&gt;&lt;STRONG&gt;Query Text Logging:&lt;/STRONG&gt; Does Databricks capture the &lt;STRONG&gt;full SQL statement text&lt;/STRONG&gt; and the &lt;STRONG&gt;actual user identity&lt;/STRONG&gt; for every request sent via the Lakebase Data API?&lt;/SPAN&gt;&lt;/LI&gt;&lt;LI&gt;&lt;SPAN class=""&gt;&lt;STRONG&gt;Log Location:&lt;/STRONG&gt; Where are these Data API history logs stored (e.g., in system.query.history, Audit Logs in Storage Bucket, or via Unity Catalog)?&lt;/SPAN&gt;&lt;/LI&gt;&lt;LI&gt;&lt;SPAN class=""&gt;&lt;STRONG&gt;Error Logging:&lt;/STRONG&gt; Are failed queries (Query Errors) and their detailed error messages recorded in these logs as well?&lt;/SPAN&gt;&lt;/LI&gt;&lt;/OL&gt;</description>
      <pubDate>Mon, 25 May 2026 05:13:44 GMT</pubDate>
      <guid>https://community.databricks.com/t5/lakebase-discussions/inquiry-regarding-query-history-and-audit-logs-for-databricks/m-p/157576#M103</guid>
      <dc:creator>POCUSER</dc:creator>
      <dc:date>2026-05-25T05:13:44Z</dc:date>
    </item>
    <item>
      <title>Re: Inquiry regarding Query History and Audit Logs for Databricks Lakebase</title>
      <link>https://community.databricks.com/t5/lakebase-discussions/inquiry-regarding-query-history-and-audit-logs-for-databricks/m-p/157585#M104</link>
      <description>&lt;P&gt;You can follow below&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;&lt;STRONG&gt;Query History Tracking - &lt;/STRONG&gt;You can use the pg_stat_statements entity for getting the historical SQL query execution details and other runtime metrics in the Lakebase instance. Every successful or failed query sent through the Lakebase is parameterized, normalized and logged alongside its total runtime, execution time and other tracking metrics. This entity serves as the primary ledger for tracking precisely what query texts were run. You can periodically offload these metrics if you require persistent retention beyond the life of the compute cluster as the data lives within the database's shared memory, More details &lt;A href="https://docs.databricks.com/aws/en/oltp/projects/pg-stat-statements" target="_self"&gt;here&lt;/A&gt;&lt;/LI&gt;&lt;LI&gt;&lt;STRONG&gt;Active Query Monitoring&lt;/STRONG&gt;&amp;nbsp;- You can use pg_stat_activity to monitor live requests, active transactions and current connections hitting the Lakebase in real time for monitoring. This entity exposes the immediate state of the database showing he currently executing queries, client IP addresses, query, backend type and operational states. It helps in finding which accounts are running active, long running or blocked statements at any given second.&lt;/LI&gt;&lt;LI&gt;&lt;STRONG&gt;Account Level Audit Logs&lt;/STRONG&gt;&amp;nbsp;- You can use system.access.audit for account level governance, infrastructure compliance and broader security perspective. All major activities related to the database - such as provisioning, configuration changes etc are recorded in the system.access.audit table. To isolate these specific events use the service name databaseInstances or postgres for getting the related details.&lt;/LI&gt;&lt;/UL&gt;</description>
      <pubDate>Mon, 25 May 2026 09:43:22 GMT</pubDate>
      <guid>https://community.databricks.com/t5/lakebase-discussions/inquiry-regarding-query-history-and-audit-logs-for-databricks/m-p/157585#M104</guid>
      <dc:creator>balajij8</dc:creator>
      <dc:date>2026-05-25T09:43:22Z</dc:date>
    </item>
    <item>
      <title>Re: Inquiry regarding Query History and Audit Logs for Databricks Lakebase</title>
      <link>https://community.databricks.com/t5/lakebase-discussions/inquiry-regarding-query-history-and-audit-logs-for-databricks/m-p/157597#M105</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.databricks.com/t5/user/viewprofilepage/user-id/228048"&gt;@POCUSER&lt;/a&gt;,&lt;/P&gt;
&lt;P data-pm-slice="1 1 []"&gt;I’m not aware of any public documentation that explicitly confirms that every request sent through the &lt;A href="https://docs.databricks.com/aws/en/oltp/projects/data-api" rel="noopener noreferrer nofollow" target="_blank"&gt;Lakebase Data API&lt;/A&gt; is captured in system.query.history or exposed through a dedicated per-request audit log.&lt;/P&gt;
&lt;P&gt;A practical way to validate it is to run a simple test query through the Data API and then check system.query.history. The public docs for that table currently describe coverage for SQL warehouses and serverless compute, so testing is the best way to confirm whether Lakebase Data API activity appears there in your environment.&lt;/P&gt;
&lt;P&gt;It is also worth checking system.access.audit together with the &lt;A href="https://docs.databricks.com/aws/en/admin/account-settings/audit-logs" rel="noopener noreferrer nofollow" target="_blank"&gt;audit log reference&lt;/A&gt; to see whether any Lakebase-related control-plane events are emitted there.&lt;/P&gt;
&lt;P class="wnfdntf _1ibi0s3f5 _1ibi0s3ce _1ibi0s3ea"&gt;If you need a definitive answer specifically for compliance, such as whether full query text, caller identity, and failed request details are logged for Lakebase Data API requests, I’d recommend opening a Databricks support case. Some of the Lakebase observability surfaces are still evolving, so support is the best route for confirmed guidance on the current supported behaviour.&lt;/P&gt;
&lt;P class="p1"&gt;&lt;FONT size="2" color="#FF6600"&gt;&lt;STRONG&gt;&lt;I&gt;If this answer resolves your question, could you mark it as “Accept as Solution”? That helps other users quickly find the correct fix.&lt;/I&gt;&lt;/STRONG&gt;&lt;/FONT&gt;&lt;I&gt;&lt;/I&gt;&lt;/P&gt;
&lt;P class="wnfdntf _1ibi0s3f5 _1ibi0s3ce _1ibi0s3ea"&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 25 May 2026 11:40:21 GMT</pubDate>
      <guid>https://community.databricks.com/t5/lakebase-discussions/inquiry-regarding-query-history-and-audit-logs-for-databricks/m-p/157597#M105</guid>
      <dc:creator>Ashwin_DSA</dc:creator>
      <dc:date>2026-05-25T11:40:21Z</dc:date>
    </item>
  </channel>
</rss>

