Question 93

Your security and operations teams want all Azure Databricks **workspace audit/diagnostic logs** (cluster events, jobs, DBFS, Unity Catalog, SQL, and so on) streamed into a central **Log Analytics workspace** in Azure Monitor so they can run Kusto (KQL) queries and build workbooks. The Databricks workspace runs the Premium plan. The Databricks workspace is deployed into your own virtual network (VNet injection), and the network security groups (NSGs) are configured to **deny all outbound traffic that is not required by Azure Databricks**. What must you configure to deliver these logs to Log Analytics?

• AIn the Azure portal, open the Azure Databricks service resource, create a **Diagnostic setting** that selects the log categories and sends them to the Log Analytics workspace; and add an outbound NSG rule allowing the **AzureMonitor** service tag.
• BInstall the Log Analytics agent on every cluster driver node and point it at the workspace key, then query the `DatabricksClusters` table.
• CEnable Predictive Optimization on Unity Catalog; it automatically forwards audit logs to Azure Monitor.
• DCreate an Event Grid subscription on the storage account that backs DBFS; Event Grid relays the logs into Log Analytics.