<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Missing workspaces in workspaces_latest but present in audit in Data Engineering</title>
    <link>https://community.databricks.com/t5/data-engineering/missing-workspaces-in-workspaces-latest-but-present-in-audit/m-p/154614#M54114</link>
    <description>&lt;P&gt;Hey&amp;nbsp;&lt;a href="https://community.databricks.com/t5/user/viewprofilepage/user-id/188867"&gt;@Danish11052000&lt;/a&gt;,&lt;/P&gt;
&lt;P&gt;Yes... This is expected and &lt;A href="https://docs.databricks.com/aws/en/admin/system-tables/workspaces" target="_blank"&gt;documented&lt;/A&gt; behaviour, not a bug.&lt;/P&gt;
&lt;P&gt;system.access.workspaces_latest contains only active workspaces in the account. When a workspace is cancelled/removed from the account, its row is removed from this table.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Ashwin_DSA_0-1776239927759.png" style="width: 999px;"&gt;&lt;img src="https://community.databricks.com/t5/image/serverpage/image-id/26082iBE78B21F1AB51462/image-size/large?v=v2&amp;amp;px=999" role="button" title="Ashwin_DSA_0-1776239927759.png" alt="Ashwin_DSA_0-1776239927759.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;system.access.audit is a 365-day history of audit events for workspaces in the region, and it continues to store events even after a workspace has been deleted.&lt;/P&gt;
&lt;P&gt;So when you run that particular query in your post,&amp;nbsp;the rows you see are typically events for workspaces that used to exist (or were recently deprovisioned) but are no longer present in workspaces_latest. Because workspaces_latest is a slow-changing dimension of the latest state of active workspaces. It won’t retain those historical entries, while audit will.&lt;/P&gt;
&lt;P&gt;If you’re validating coverage, you can interpret workspace_ids that don’t resolve in workspaces_latest as deleted/no-longer-in-account workspaces (or in rare cases, very recently created ones before workspaces_latest has caught up).&lt;/P&gt;
&lt;P class="p1"&gt;&lt;FONT size="2" color="#FF6600"&gt;&lt;STRONG&gt;&lt;I&gt;If this answer resolves your question, could you mark it as “Accept as Solution”? That helps other users quickly find the correct fix.&lt;/I&gt;&lt;/STRONG&gt;&lt;/FONT&gt;&lt;I&gt;&lt;/I&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Wed, 15 Apr 2026 08:00:03 GMT</pubDate>
    <dc:creator>Ashwin_DSA</dc:creator>
    <dc:date>2026-04-15T08:00:03Z</dc:date>
    <item>
      <title>Missing workspaces in workspaces_latest but present in audit</title>
      <link>https://community.databricks.com/t5/data-engineering/missing-workspaces-in-workspaces-latest-but-present-in-audit/m-p/154598#M54112</link>
      <description>&lt;P&gt;While validating workspace coverage, we observed that some workspace_id&amp;nbsp;exist in &lt;STRONG&gt;system.access.audit&lt;/STRONG&gt; but return &lt;STRONG&gt;NULL&lt;/STRONG&gt; in &lt;STRONG&gt;system.access.workspaces_latest.&lt;/STRONG&gt;&lt;/P&gt;&lt;DIV&gt;&amp;nbsp;&lt;DIV&gt;&lt;DIV class=""&gt;&amp;nbsp;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;LI-CODE lang="markup"&gt;select distinct a.workspace_id, w.workspace_name
from system.access.audit a
left join system.access.workspaces_latest w
on w.workspace_id = a.workspace_id
where w.workspace_name is null;​&lt;/LI-CODE&gt;&lt;P&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;DIV&gt;Is there a known reason behind this behavior?&lt;BR /&gt;Would really appreciate it if anyone is aware and can share insights.&lt;/DIV&gt;</description>
      <pubDate>Wed, 15 Apr 2026 07:13:16 GMT</pubDate>
      <guid>https://community.databricks.com/t5/data-engineering/missing-workspaces-in-workspaces-latest-but-present-in-audit/m-p/154598#M54112</guid>
      <dc:creator>Danish11052000</dc:creator>
      <dc:date>2026-04-15T07:13:16Z</dc:date>
    </item>
    <item>
      <title>Re: Missing workspaces in workspaces_latest but present in audit</title>
      <link>https://community.databricks.com/t5/data-engineering/missing-workspaces-in-workspaces-latest-but-present-in-audit/m-p/154614#M54114</link>
      <description>&lt;P&gt;Hey&amp;nbsp;&lt;a href="https://community.databricks.com/t5/user/viewprofilepage/user-id/188867"&gt;@Danish11052000&lt;/a&gt;,&lt;/P&gt;
&lt;P&gt;Yes... This is expected and &lt;A href="https://docs.databricks.com/aws/en/admin/system-tables/workspaces" target="_blank"&gt;documented&lt;/A&gt; behaviour, not a bug.&lt;/P&gt;
&lt;P&gt;system.access.workspaces_latest contains only active workspaces in the account. When a workspace is cancelled/removed from the account, its row is removed from this table.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Ashwin_DSA_0-1776239927759.png" style="width: 999px;"&gt;&lt;img src="https://community.databricks.com/t5/image/serverpage/image-id/26082iBE78B21F1AB51462/image-size/large?v=v2&amp;amp;px=999" role="button" title="Ashwin_DSA_0-1776239927759.png" alt="Ashwin_DSA_0-1776239927759.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;system.access.audit is a 365-day history of audit events for workspaces in the region, and it continues to store events even after a workspace has been deleted.&lt;/P&gt;
&lt;P&gt;So when you run that particular query in your post,&amp;nbsp;the rows you see are typically events for workspaces that used to exist (or were recently deprovisioned) but are no longer present in workspaces_latest. Because workspaces_latest is a slow-changing dimension of the latest state of active workspaces. It won’t retain those historical entries, while audit will.&lt;/P&gt;
&lt;P&gt;If you’re validating coverage, you can interpret workspace_ids that don’t resolve in workspaces_latest as deleted/no-longer-in-account workspaces (or in rare cases, very recently created ones before workspaces_latest has caught up).&lt;/P&gt;
&lt;P class="p1"&gt;&lt;FONT size="2" color="#FF6600"&gt;&lt;STRONG&gt;&lt;I&gt;If this answer resolves your question, could you mark it as “Accept as Solution”? That helps other users quickly find the correct fix.&lt;/I&gt;&lt;/STRONG&gt;&lt;/FONT&gt;&lt;I&gt;&lt;/I&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 15 Apr 2026 08:00:03 GMT</pubDate>
      <guid>https://community.databricks.com/t5/data-engineering/missing-workspaces-in-workspaces-latest-but-present-in-audit/m-p/154614#M54114</guid>
      <dc:creator>Ashwin_DSA</dc:creator>
      <dc:date>2026-04-15T08:00:03Z</dc:date>
    </item>
  </channel>
</rss>

