a user has been deleted from databricks workspace . Is there any way to find who deleted the user?

[Anuj93]

a user has been deleted from databricks workspace . Is there any way to find who deleted the user?

[Hubert-Dudek]

To do that you need to have enabled audit logs (if event already happened and it was not "on" I am afraid now it is too late).

For Azure https://docs.microsoft.com/en-us/azure/databricks/administration-guide/account-settings/azure-diagno...

For AWS https://docs.databricks.com/administration-guide/account-settings/audit-logs.html#events

[Anuj93 · Accepted solution]

Audit log is already enabled.. i got the answer using log analytics . Thanks for the response