Slack Access and Integration Logs connector reference

Important

This feature is in Beta. Workspace admins can control access to this feature from the Previews page. See Manage Azure Databricks previews.

This page provides reference information for the managed Slack Access and Integration Logs connector, including supported source tables.

Supported source tables

The Slack Access and Integration Logs connector supports the following source tables, all under the default source schema:

Source table	Description	Incremental ingestion
access_logs	User sign-in records for the Slack workspace, including IP address and client information.	Not supported
integration_logs	Changes to Slack apps and integrations in the workspace, such as installs, removals, and configuration updates.	Supported

Destination table schemas

Both tables use lw_id as the primary key and use liquid clustering on the time column.

access_logs

Field	Data type
lw_id	string
time	timestamp
user_id	string
username	string
date_first	bigint
date_last	bigint
count	bigint
ip	string
user_agent	string
isp	string
country	string
region	string

integration_logs

Field	Data type
lw_id	string
time	timestamp
user_id	string
user_name	string
service_id	string
service_type	string
app_id	string
app_type	string
date	bigint
change_type	string
scope	string
channel	string
reason	string
rss_feed	boolean
rss_feed_change_type	string
rss_feed_title	string
rss_feed_url	string

Required OAuth scope

The connector requires the admin Slack user scope on the installing user's OAuth token. The installing user must be a Workspace Owner or Workspace Admin on the Slack workspace they want to ingest from.