Microsoft AzureDataLake Storage User Activity Logs

Question

Hi Team,

Wanted to know if I want to see in Azure Data Lake Storage Audit; whenever user export file once SQL statement is completed then what Loganalytics table to refer? At current I can only see under AzureDiagnostics event associated with "GETCustomerDataAtRest" and "GETAdlsUsage" only. Whether auditing configuration changes are also required to see that activity or not?

Answer 1

@Joomla , thank you for posting this question on Microsoft Q&A.

The audit related logs for Azure Data Lake Storage are collected using the "Diagnostic Settings" which is available in the resource menu of ADLS. Ensure that "Audit Log" category is selected with destination set as one of the "Log Analytics Workspace":

As you mentioned, the logs are available in " AzureDiagnostic" table. These are the only settings required for enabling audit logging. For more details, see Accessing diagnostic logs for Azure Data Lake Storage

Hope this helps.

If the answer did not help, please add more context/follow-up question for it, and we will help you out. Else, if the answer helped, please click Accept answer so that it can help others in the community looking for help on similar topics.