Records audit events for workspaces in your region, in a system table still in Public Preview. You get 365 days of retention free.
Read more: Databricks docs
In the Ultra Transcenders books
Each book explains system.access.audit in context, with comparison tables and the common traps.
Terms in this definition
- Audit events
Lists who signed in and what permissions or settings changed, along with other security activity, for NSX, vSAN, VMs, hosts and vCenter. Each search is limited to a 48-hour window, and the page only works once VCF Operations for logs has been deployed from fleet management.
- region
A provider-defined grouping in VCF Automation of Supervisors that all share one NSX Local Manager; tenants consume its compute, storage and memory via quotas set per region.
- Chat message roles
Labels on chat messages: instructions go under system, the person's input under user, the model's previous answers under assistant, and results returned by a called tool under tool (or function).
- Event
Table in Log Analytics where entries from Windows event logs are kept.
- Preview channel
The pipeline runtime channel for trying out new features and upcoming runtime changes. Production pipelines belong on
current. - Get
Key Vault permission on secrets that allows a single secret to be read; App Service Key Vault references need nothing beyond it.
Related terms
- Audit log system table
Databricks recommends this over exporting diagnostic logs:
system.access.audit, a Public Preview system table holding audit events from the account's workspaces in a region, retained free for 365 days. - System tables
Operational data about your account, held read-only in the
systemcatalog, e.g.system.access.audit,system.billing.usageand lineage. Users needSELECTplusUSE CATALOGandUSE SCHEMA.