@alex_svyatetsFrom my understanding, audit logs only capture events or queries that involve UC managed objects. In cases where a Delta table is accessed directly via its file path instead of its registered table name, the query may not be logged. Similarly, queries involving temporary views might not appear in the audit. It is also important that clusters should be UC enabled by default.
Could you provide specific examples of queries that are not being logged?
