one of the test.db folder in a test container of datalake has been deleted and is there any way to know the user details who has deleted

Question

we have test.db in test container of a datalake . Some one has deleted that db so wanted to know the user details or any databricks script that deleted the folder.

Answer 1

Hello @kks8589 ,

Welcome to the Microsoft Q&A platform.

You can get the user details who has deleted Azure Data Lake Container using Azure Activity log.

The Activity log is a platform log in Azure that provides insight into subscription-level events. This includes such information as when a resource is modified or when a virtual machine is started. You can view the Activity log in the Azure portal or retrieve entries with PowerShell and CLI.

Through Azure Portal:

Through Log Analytics workspace => Logs:

AzureActivity   
| where OperationNameValue contains "MICROSOFT.STORAGE/STORAGEACCOUNTS/BLOBSERVICES/CONTAINERS/DELETE"  

Hope this will help. Please let us know if any further queries.

------------------------------

• Please don't forget to click on or upvote button whenever the information provided helps you. Original posters help the community find answers faster by identifying the correct answer. Here is how
• Want a reminder to come back and check responses? Here is how to subscribe to a notification
• If you are interested in joining the VM program and help shape the future of Q&A: Here is how you can be part of Q&A Volunteer Moderators