a user has been deleted from databricks workspace . Is there any way to find who deleted the user?

Anuj93
New Contributor III

a user has been deleted from databricks workspace . Is there any way to find who deleted the user?

Hubert-Dudek
Databricks MVP

To do that you need to have enabled audit logs (if event already happened and it was not "on" I am afraid now it is too late).

For Azure https://docs.microsoft.com/en-us/azure/databricks/administration-guide/account-settings/azure-diagno...

For AWS https://docs.databricks.com/administration-guide/account-settings/audit-logs.html#events


My blog: https://databrickster.medium.com/

Anuj93
New Contributor III

Audit log is already enabled.. i got the answer using log analytics . Thanks for the response

View solution in original post