Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Important
Lakewatch is in Private Preview. To request access, reach out to your Azure Databricks account team.
Lakewatch ingests security data from cloud storage, existing tables within Databricks, or API connectors. It then uses parsers to transform the data into a normalized schema ready for security analysis. This ingestion and parsing pipeline is called a datasource.
This section teaches you how to create and manage datasources, how to work with the built-in parsers provided for many common sources of security data, and how to create custom parsers.
In this section
| Topic | Description |
|---|---|
| Create and manage datasources | Choose an ingestion method, configure settings, attach parsers, and monitor health |
| Supported logs | Browse the log sources Lakewatch supports, with onboarding steps, parsed schema, and observables for each |
| Custom logs | Edit existing parsers or create custom parsers |