--- title: "Databricks" slug: "databricks" updated: 2025-10-23T23:51:11Z published: 2025-10-23T23:51:11Z canonical: "docs.databee.buzz/databricks" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt > Use this file to discover all available pages before exploring further. # Databricks Databricks audit events provide visibility into user activity, job runs, cluster usage, and workspace changes - helping security and compliance teams monitor access and usage patterns. For detailed information, please refer to [Databricks audit logs documentation](https://docs.databricks.com/aws/en/admin/account-settings/audit-logs). **Integration Method:** **API** and **S3**. > [!NOTE] > Note: > > For S3 ingestion, refer to [linked documentation](https://docs.databee.buzz/docs/amazon-s3) for Datasource configuration. Follow the steps outlined in the [Databricks Audit Log Delivery Guide](https://docs.databricks.com/aws/en/admin/account-settings/audit-log-delivery), and then configure a service principal access to Databricks using [OAuth (M2M authentication)](https://docs.databricks.com/aws/en/dev-tools/auth/oauth-m2m?language=Profile#step-3-use-oauth-authorization) as described in the official documentation. **Tables**: Account change (3001), Authentication (3002), Scan Activity (6007), File System Activity (1001), Detection Finding (2004), User Access Management (3005), SSH Activity (4007) This integration supports the following types of events. | **Event** | **Description** | | --- | --- | | Audits | Retrieve a list of all audit events. | This integration supports the following versions | Databricks version | v2025.16 (Serverless SQL Warehouse – Current Channel) | | --- | --- | | Databricks sql statement API version | 2.0 | ## Prerequisites - The user should have access to the Databricks portal as an Administrator. - The user should have access to the DataBee console. ## Configuration Overview 1. Generate API credentials from the Databricks portal. 1. [Generate a personal access token](/user-manual/docs/databricks-new#generate-token). 2. [Retrieve the SQL Warehouse ID](/user-manual/docs/databricks-new#retrieve-warehouse-id) from the Databricks UI. 2. Create [Databricks Data Feed](/user-manual/docs/databricks-new#databee-configuration) in the DataBee console with the required credentials. | **DataBee Parameter** | **Databricks Parameter** | | --- | --- | | Token | Token | | API Base URL() | Databricks Instance | | Warehouse Id | warehouse_id | ## Databricks Configuration ### Generate Token 1. Sign in to **Databricks** instance as an **Administrator**. 2. Copy the **instance** value from the URL for later use. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/databricks---s3-ingestion-image-ghbrin8r.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A45%3A40Z&se=2026-10-30T13%3A45%3A40Z&sr=c&sp=r&sig=3WR4hsYiC2t8YhbINVfbYEBjrXktlzbgpwRLfLHIoyo%3D) 3. Click on your profile icon (top right corner). 1. Select **Settings** from the dropdown menu. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/databricks---s3-ingestion-image-4myzfxg4.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A45%3A40Z&se=2026-10-30T13%3A45%3A40Z&sr=c&sp=r&sig=3WR4hsYiC2t8YhbINVfbYEBjrXktlzbgpwRLfLHIoyo%3D) 4. Under **Settings**, 1. Under **User**, click on the **Developer** tab. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/databricks---s3-ingestion-image-zja8eg0w.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A45%3A40Z&se=2026-10-30T13%3A45%3A40Z&sr=c&sp=r&sig=3WR4hsYiC2t8YhbINVfbYEBjrXktlzbgpwRLfLHIoyo%3D) 5. In the **Developer** section, click **Manage**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/databricks---s3-ingestion-image-u3ibjk4u.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A45%3A40Z&se=2026-10-30T13%3A45%3A40Z&sr=c&sp=r&sig=3WR4hsYiC2t8YhbINVfbYEBjrXktlzbgpwRLfLHIoyo%3D) 6. Click on **Generate new token** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/databricks---s3-ingestion-image-yhijeq89.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A45%3A40Z&se=2026-10-30T13%3A45%3A40Z&sr=c&sp=r&sig=3WR4hsYiC2t8YhbINVfbYEBjrXktlzbgpwRLfLHIoyo%3D) 7. Add a comment for reference. 1. Click **Generate**. > [!NOTE] > **Note**: > > The token will expire after 90 days. Users must re-generate a new token once it expires. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/databricks---s3-ingestion-image-i907xwip.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A45%3A40Z&se=2026-10-30T13%3A45%3A40Z&sr=c&sp=r&sig=3WR4hsYiC2t8YhbINVfbYEBjrXktlzbgpwRLfLHIoyo%3D) 8. Copy the **token** securely (you will not be able to view it again). 1. Click on the **Done** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/databricks---s3-ingestion-image-z0zbi5kz.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A45%3A40Z&se=2026-10-30T13%3A45%3A40Z&sr=c&sp=r&sig=3WR4hsYiC2t8YhbINVfbYEBjrXktlzbgpwRLfLHIoyo%3D) ### Retrieve Warehouse Id 1. On the left sidebar, click on **SQL Warehouses**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/databricks---s3-ingestion-image-w4qw5dxh.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A45%3A40Z&se=2026-10-30T13%3A45%3A40Z&sr=c&sp=r&sig=3WR4hsYiC2t8YhbINVfbYEBjrXktlzbgpwRLfLHIoyo%3D) 2. On **SQL Warehouses** tab, click on the name of the warehouse you want to use. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/databricks---s3-ingestion-image-cctll65i.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A45%3A40Z&se=2026-10-30T13%3A45%3A40Z&sr=c&sp=r&sig=3WR4hsYiC2t8YhbINVfbYEBjrXktlzbgpwRLfLHIoyo%3D) 3. Copy the **warehouse Id** for later use. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/databricks---s3-ingestion-image-jr6v9zpq.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A45%3A40Z&se=2026-10-30T13%3A45%3A40Z&sr=c&sp=r&sig=3WR4hsYiC2t8YhbINVfbYEBjrXktlzbgpwRLfLHIoyo%3D) ## DataBee Configuration 1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/databricks---s3-ingestion-image-00awtjkq.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A45%3A40Z&se=2026-10-30T13%3A45%3A40Z&sr=c&sp=r&sig=3WR4hsYiC2t8YhbINVfbYEBjrXktlzbgpwRLfLHIoyo%3D) 2. Search for the **Databricks** and click it as shown below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/databricks---s3-ingestion-image-1qjyi0vk.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A45%3A40Z&se=2026-10-30T13%3A45%3A40Z&sr=c&sp=r&sig=3WR4hsYiC2t8YhbINVfbYEBjrXktlzbgpwRLfLHIoyo%3D) 3. Click on the **API Ingest** option for collection method. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/databricks---s3-ingestion-image-vd8ks3he.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A45%3A40Z&se=2026-10-30T13%3A45%3A40Z&sr=c&sp=r&sig=3WR4hsYiC2t8YhbINVfbYEBjrXktlzbgpwRLfLHIoyo%3D) 4. Enter basic contact information in the contact form and click **Next**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/databricks---s3-ingestion-image-v20gysf9.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A45%3A40Z&se=2026-10-30T13%3A45%3A40Z&sr=c&sp=r&sig=3WR4hsYiC2t8YhbINVfbYEBjrXktlzbgpwRLfLHIoyo%3D) 5. In the following dialog box, enter the following: - **Authorization Method:** Bearer Token - **Token**: Paste the token that was generated earlier step. - **Warehouse Id**: Paste the warehouse id that was generated earlier step. - **API Base URL:** Replace by your instance value. - **Event types:** Preselected for all the event types that integration pulls. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/databricks---s3-ingestion-image-fc04vi6t.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A45%3A40Z&se=2026-10-30T13%3A45%3A40Z&sr=c&sp=r&sig=3WR4hsYiC2t8YhbINVfbYEBjrXktlzbgpwRLfLHIoyo%3D) 6. Click **Submit**. ## Troubleshooting Tips If you're receiving a 401 Unauthorized response, it could be due to one of the following: - **Incorrect credentials**: Double-check that your token and other authentication details are correct. - **Expired token**: Tokens expire after 90 days. If your token has expired, re-generate a new one to restore access. #