Databricks workspaces should have diagnostic log delivery configured
Azure Databricks Diagnostic Logging provides insights into system operations, user activities, and security events within a Databricks workspace. The check is titled "Ensure that diagnostic log delivery is configured for Azure Databricks".
Azure Databricks Diagnostic Logging provides insights into system operations, user activities, and security events within a Databricks workspace.
What this control checks
Databricks workspaces must have diagnostic log delivery configured.
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.databricks_workspace_diagnostic_log_delivery_configured.
Framework-specific interpretation
CIS Azure Benchmark v4.0.0: Mapped to 3.1.7 (Ensure that diagnostic log delivery is configured for Azure Databricks).
CIS Azure Benchmark v5.0.0: Mapped to 2.1.7 (Ensure that diagnostic log delivery is configured for Azure Databricks).
Framework mappings
The clauses this control is mapped to in each framework.
- 3.1.7 Ensure that diagnostic log delivery is configured for Azure Databricks
- 2.1.7 Ensure that diagnostic log delivery is configured for Azure Databricks
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
databricks_workspace_diagnostic_log_delivery_configured - Powerpipe Control:
azure_compliance.control.databricks_workspace_diagnostic_log_delivery_configured
Last reviewed: 2026-10-11