From 4ae2d0ae3bde2ad916372c784d1266c10d1863b4 Mon Sep 17 00:00:00 2001 From: Amee Lepcha Date: Thu, 9 Oct 2025 13:51:52 +0530 Subject: [PATCH 01/11] Databricks Audit Source (C2C collection) --- blog-service/2025-10-09-collection.md | 12 ++ cid-redirects.json | 1 + .../product-list/product-list-a-l.md | 1 + .../databricks-audit-source.md | 111 ++++++++++++++++++ .../index.md | 6 + sidebars.ts | 1 + .../files/c2c/databricks-audit/example.json | 17 +++ static/files/c2c/databricks-audit/example.tf | 18 +++ 8 files changed, 167 insertions(+) create mode 100644 blog-service/2025-10-09-collection.md create mode 100644 docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md create mode 100644 static/files/c2c/databricks-audit/example.json create mode 100644 static/files/c2c/databricks-audit/example.tf diff --git a/blog-service/2025-10-09-collection.md b/blog-service/2025-10-09-collection.md new file mode 100644 index 0000000000..668cb6393a --- /dev/null +++ b/blog-service/2025-10-09-collection.md @@ -0,0 +1,12 @@ +--- +title: Databricks Audit Source (Collection) +image: https://help.sumologic.com/img/sumo-square.png +keywords: + - c2c + - databricks-audit-source +hide_table_of_contents: true +--- + +import useBaseUrl from '@docusaurus/useBaseUrl'; + +We're excited to announce the release of our new cloud-to-cloud source for Databricks Audit. This source securely collects audit logs from the Databricks platform and sends them to Sumo Logic for streamlined analysis. [Learn more](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source). diff --git a/cid-redirects.json b/cid-redirects.json index fa6df501a3..611aff18ea 100644 --- a/cid-redirects.json +++ b/cid-redirects.json @@ -2947,6 +2947,7 @@ "/docs/integrations/microsoft-azure/microsoft-defender-for-identity/": "/docs/integrations/microsoft-azure/azure-security-microsoft-defender-for-identity", "/cid/1112": "/docs/integrations/saas-cloud/carbon-black-inventory/", "/cid/1111": "/docs/integrations/microsoft-azure/azure-open-ai", + "/cid/1113": "/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source/", "/Cloud_SIEM_Enterprise": "/docs/cse", "/Cloud_SIEM_Enterprise/Administration": "/docs/cse/administration", "/Cloud_SIEM_Enterprise/Administration/Cloud_SIEM_Enterprise_Feature_Update_(2022)": "/docs/cse/administration", diff --git a/docs/integrations/product-list/product-list-a-l.md b/docs/integrations/product-list/product-list-a-l.md index a1d903b174..bf4056ae7b 100644 --- a/docs/integrations/product-list/product-list-a-l.md +++ b/docs/integrations/product-list/product-list-a-l.md @@ -186,6 +186,7 @@ For descriptions of the different types of integrations Sumo Logic offers, see [ | :-- | :-- | :-- | | Thumbnail icon | [DarkOwl](https://www.darkowl.com/) | Automation integration: [DarkOwl](/docs/platform-services/automation-service/app-central/integrations/darkowl/) | | Thumbnail icon | [Darktrace](https://darktrace.com/) | Automation integration: [Darktrace](/docs/platform-services/automation-service/app-central/integrations/darktrace/)
Cloud SIEM integration: [Darktrace](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/91f4544f-6118-4bdc-8b30-01f045d20e4c.md) | +| Thumbnail icon | [Databricks](https://darktrace.com/) | Collector: [Databricks Audit](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source/) | | Thumbnail icon | [Datadog](https://www.datadoghq.com/) | App: [Datadog](/docs/integrations/saas-cloud/datadog/)
Webhook: [Webhook Connection for Datadog](/docs/alerts/webhook-connections/datadog/) | | Thumbnail icon | [Dataminr](https://www.dataminr.com/) | Cloud SIEM integration: [Dataminr](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/0019f757-3674-4688-9d6c-063366cfcfa9.md)
Partner integration: [Dataminr Pulse for Sumo Logic](https://github.com/SumoLogic/sumologic-public-partner-apps/tree/master/DataminrPulse) | | Thumbnail icon | [Datto](https://www.datto.com/) | Automated integration: [Datto RMM](/docs/platform-services/automation-service/app-central/integrations/datto-rmm/)
Cloud SIEM integration: [Datto](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/1E4721C4-DC98-456D-B0DF-80365924683A.md) | diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md new file mode 100644 index 0000000000..61372bfd6d --- /dev/null +++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md @@ -0,0 +1,111 @@ +--- +id: databricks-audit-source +title: Databricks Audit Source +sidebar_label: Databricks Audit +tags: + - cloud-to-cloud + - databricks-audit-logs +description: Learn how to collect Databricks Audit logs and send them to Sumo Logic for monitoring, auditing, and compliance. +--- + +import ForwardToSiem from '/docs/reuse/forward-to-siem.md'; +import useBaseUrl from '@docusaurus/useBaseUrl'; + +icon + +Databricks is a unified data platform that supports data engineering, machine learning, and analytics in a collaborative environment. It offers enterprise-grade security, compliance, and governance for data workflows. + +The Audit Logs API enables you to capture structured records of user and system activities within the Databricks workspace, including SQL queries, job executions, cluster events, and workspace changes. These logs facilitate auditing, security monitoring, and regulatory compliance. + +## Data collected + +| Polling Interval | Data | +| :--- | :--- | +| 5 minutes | [Audit Logs](https://docs.databricks.com/api/workspace/statementexecution/executestatement) | + +## Setup + +### Vendor configuration + +The Databricks Audit source requires you to provide the Databricks Audit Base URL (API Gateway URL), Warehouse ID, Client ID, and Client Secret to export to configure the source. Follow the below steps to generate the required values: + +#### Base URL + +Follow the below steps to get the Base URL for user configuration: +1. [Log in]() to your **Databricks** workspace. +2. The Base URL is visible in your browser’s address bar after login. For example, `https://YOUR-INSTANCE.databricks.com`. + +#### Warehouse ID + +The Warehouse ID is required to query Databricks SQL and fetch audit logs. Follow the below steps to get the Warehouse ID for user configuration: +1. Log in to your **Databricks** workspace. +2. Navigate to **SQL Warehouses** in the sidebar. +3. Click the warehouse name you want to use. +4. On the warehouse **details page**, select the **Properties** tab. +5. Locate and copy the **Warehouse ID**. + +#### Client ID and Client Secret + +To generate the Client ID and Client Secret, refer to the [Create an OAuth Secret](https://docs.databricks.com/aws/en/dev-tools/auth/oauth-m2m?language=Environment#-step-1-create-an-oauth-secret) section. + +### Source configuration + +When you create a Databricks Audit Source, you add it to a Hosted Collector. Before creating the Source, identify the Hosted Collector you want to use or create a new Hosted Collector. For instructions, see [Configure a Hosted Collector and Source](/docs/send-data/hosted-collectors/configure-hosted-collector). + +To configure Databricks Audit Source: +1. [**New UI**](/docs/get-started/sumo-logic-ui). In the Sumo Logic main menu select **Data Management**, and then under **Data Collection** select **Collection**. You can also click the **Go To...** menu at the top of the screen and select **Collection**.
[**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select **Manage Data > Collection > Collection**. +1. On the Collectors page, click **Add Source** next to a Hosted Collector. +1. Search for and select the **Databricks Audit** icon. +1. Enter a **Name** to display for the Source in Sumo Logic. The description is optional. +1. (Optional) For **Source Category**, enter any string to tag the output collected from the Source. Category metadata is stored in a searchable field called `_sourceCategory`. +1. (Optional) **Fields**. Click the **+Add Field** link to define the fields you want to associate. Each field needs a name (key) and value. + * green check circle.png A green circle with a check mark is shown when the field exists and is enabled in the Fields table schema. + * orange exclamation point.png An orange triangle with an exclamation point is shown when the field doesn't exist in the Fields table schema. In this case, you'll see an option to automatically add or enable the nonexistent fields to the Fields table schema. If a field is sent to Sumo Logic that does not exist in the Fields schema it is ignored, known as dropped. +1. Enter the [Base URL](#base-url) of your account. +1. Enter the [Warehouse ID](#warehouse-id) to fetch audit logs. +1. Enter the [Client ID and Client Secret](#client-id-and-client-secret) to authorize access to your Databricks resources. +1. The **Polling Interval** is set for 5 minutes hours by default. You can adjust it based on your needs. +1. When you are finished configuring the Source, click **Save**. + +## JSON schema + +Sources can be configured using UTF-8 encoded JSON files with the Collector Management API. See [Use JSON to Configure Sources](/docs/send-data/use-json-configure-sources) for details.  + +| Parameter | Type | Value | Required | Description | +|:--|:--|:--|:--|:--| +| schemaRef | JSON Object | `{"type":"Databricks Audit Logs"}` | Yes | Define the specific schema type. | +| sourceType | String | `"Universal"` | Yes | Type of source. | +| config | JSON Object | [Configuration object](#configuration-object) | Yes | Source type specific values. | + +### Configuration Object + +| Parameter | Type | Required | Default | Description | Example | +|:--|:--|:--|:--|:--|:--| +| name | String | Yes | `null` | Type a desired name of the source. The name must be unique per Collector. This value is assigned to the [metadata](/docs/search/get-started-with-search/search-basics/built-in-metadata) field `_source`. | `"mySource"` | +| description | String | No | `null` | Type a description of the source. | `"Testing source"` +| category | String | No | `null` | Type a category of the source. This value is assigned to the [metadata](/docs/search/get-started-with-search/search-basics/built-in-metadata) field `_sourceCategory`. See [best practices](/docs/send-data/best-practices) for details. | `"mySource/test"` +| fields | JSON Object | No | `null` | JSON map of key-value fields (metadata) to apply to the Collector or Source. Use the boolean field `_siemForward` to enable forwarding to SIEM.|`{"_siemForward": false, "fieldA": "valueA"}` | +| baseURL | String | Yes | `null` | Base URL of the Databricks workspace. For example, `https://.databricks.com`. | | +| warehouseID | String | Yes | `null` | Unique identifier of the SQL Warehouse within the Databricks workspace, used to query and fetch audit logs. For example, `bd4dc8ef7e54782c`. | | +| clientID | String | Yes | `null` | Client ID of the account. | | +| clientSecret | String | Yes | `null` | Client Secret of the account | | +| pollingIntervalMin | Integer | No | 5 minutes | Time interval after which the source will check for new data.
Minimum: 5 minutes
Maximum: 24 hours | | + +### JSON example + +```json reference +https://github.com/SumoLogic/sumologic-documentation/blob/main/static/files/c2c/databricks-audit/example.json +``` + +### Terraform example + +```sh reference +https://github.com/SumoLogic/sumologic-documentation/blob/main/static/files/c2c/databricks-audit/example.tf +``` + + +## FAQ + +:::info +Click [here](/docs/c2c/info) for more information about Cloud-to-Cloud sources. +::: \ No newline at end of file diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/index.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/index.md index bb437a93a2..40e17fcc75 100644 --- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/index.md +++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/index.md @@ -270,6 +270,12 @@ In this section, we'll introduce the following concepts:

Provides a secure endpoint to receive authentication logs from the Cybereason Malops API.

+
+
+ icon

Databricks Audit

+

Track user and system activities to support governance and compliance using Databricks Audit logs.

+
+
Thumbnail icon

Digital Guardian

diff --git a/sidebars.ts b/sidebars.ts index a8bdb37dea..44f8f0dd17 100644 --- a/sidebars.ts +++ b/sidebars.ts @@ -463,6 +463,7 @@ module.exports = { 'send-data/hosted-collectors/cloud-to-cloud-integration-framework/cyberark-source', 'send-data/hosted-collectors/cloud-to-cloud-integration-framework/cyberark-audit-source', 'send-data/hosted-collectors/cloud-to-cloud-integration-framework/cybereason-source', + 'send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source', 'send-data/hosted-collectors/cloud-to-cloud-integration-framework/digital-guardian-source', 'send-data/hosted-collectors/cloud-to-cloud-integration-framework/docusign-source', 'send-data/hosted-collectors/cloud-to-cloud-integration-framework/dropbox-source', diff --git a/static/files/c2c/databricks-audit/example.json b/static/files/c2c/databricks-audit/example.json new file mode 100644 index 0000000000..fdd1bc459c --- /dev/null +++ b/static/files/c2c/databricks-audit/example.json @@ -0,0 +1,17 @@ +{ + "api.version": "v1", + "source": { + "config": { + "name": "Databricks Audit Logs", + "baseURL": "https://.databricks.com", + "warehouseId": "bf7gs36gfr54392c", + "clientId": "bf7gs36gfs-r54392c-lkdsdas", + "clientSecret": "wdwxxxxxqwedwedxxxxxqewdxxxxxxqwedxxxx", + "pollingInterval": "5m" + }, + "schemaRef": { + "type": "Databricks Audit Logs" + }, + "sourceType": "Universal" + } +} \ No newline at end of file diff --git a/static/files/c2c/databricks-audit/example.tf b/static/files/c2c/databricks-audit/example.tf new file mode 100644 index 0000000000..2ca68d53d2 --- /dev/null +++ b/static/files/c2c/databricks-audit/example.tf @@ -0,0 +1,18 @@ +resource "sumologic_cloud_to_cloud_source" "databricks-audit-source" { + collector_id = sumologic_collector.collector.id + schema_ref = { + type = "Databricks Audit Source" + } + config = jsonencode({ + "name": "Databricks Audit Logs", + "baseURL": "https://.databricks.com", + "warehouseId": "bf7gs36gfr54392c", + "clientId": "bf7gs36gfs-r54392c-lkdsdas", + "clientSecret": "wdwxxxxxqwedwedxxxxxqewdxxxxxxqwedxxxx", + "pollingInterval": "5m" + }) +} +resource "sumologic_collector" "collector" { + name = "my-collector" + description = "Just testing this" +} \ No newline at end of file From 293f5258d7b60f70e21b9547e796db07181df639 Mon Sep 17 00:00:00 2001 From: Amee Lepcha Date: Thu, 9 Oct 2025 13:59:31 +0530 Subject: [PATCH 02/11] added links and icon --- .../product-list/product-list-a-l.md | 2 +- .../databricks-audit-source.md | 6 +++--- .../index.md | 2 +- static/img/collector/databricks-icon.png | Bin 0 -> 22332 bytes 4 files changed, 5 insertions(+), 5 deletions(-) create mode 100644 static/img/collector/databricks-icon.png diff --git a/docs/integrations/product-list/product-list-a-l.md b/docs/integrations/product-list/product-list-a-l.md index bf4056ae7b..82c859ebc0 100644 --- a/docs/integrations/product-list/product-list-a-l.md +++ b/docs/integrations/product-list/product-list-a-l.md @@ -186,7 +186,7 @@ For descriptions of the different types of integrations Sumo Logic offers, see [ | :-- | :-- | :-- | | Thumbnail icon | [DarkOwl](https://www.darkowl.com/) | Automation integration: [DarkOwl](/docs/platform-services/automation-service/app-central/integrations/darkowl/) | | Thumbnail icon | [Darktrace](https://darktrace.com/) | Automation integration: [Darktrace](/docs/platform-services/automation-service/app-central/integrations/darktrace/)
Cloud SIEM integration: [Darktrace](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/91f4544f-6118-4bdc-8b30-01f045d20e4c.md) | -| Thumbnail icon | [Databricks](https://darktrace.com/) | Collector: [Databricks Audit](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source/) | +| Thumbnail icon | [Databricks](https://www.databricks.com/) | Collector: [Databricks Audit](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source/) | | Thumbnail icon | [Datadog](https://www.datadoghq.com/) | App: [Datadog](/docs/integrations/saas-cloud/datadog/)
Webhook: [Webhook Connection for Datadog](/docs/alerts/webhook-connections/datadog/) | | Thumbnail icon | [Dataminr](https://www.dataminr.com/) | Cloud SIEM integration: [Dataminr](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/0019f757-3674-4688-9d6c-063366cfcfa9.md)
Partner integration: [Dataminr Pulse for Sumo Logic](https://github.com/SumoLogic/sumologic-public-partner-apps/tree/master/DataminrPulse) | | Thumbnail icon | [Datto](https://www.datto.com/) | Automated integration: [Datto RMM](/docs/platform-services/automation-service/app-central/integrations/datto-rmm/)
Cloud SIEM integration: [Datto](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/1E4721C4-DC98-456D-B0DF-80365924683A.md) | diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md index 61372bfd6d..bb16501c07 100644 --- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md +++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md @@ -11,7 +11,7 @@ description: Learn how to collect Databricks Audit logs and send them to Sumo Lo import ForwardToSiem from '/docs/reuse/forward-to-siem.md'; import useBaseUrl from '@docusaurus/useBaseUrl'; -icon +icon Databricks is a unified data platform that supports data engineering, machine learning, and analytics in a collaborative environment. It offers enterprise-grade security, compliance, and governance for data workflows. @@ -32,13 +32,13 @@ The Databricks Audit source requires you to provide the Databricks Audit Base UR #### Base URL Follow the below steps to get the Base URL for user configuration: -1. [Log in]() to your **Databricks** workspace. +1. [Log in](https://accounts.cloud.databricks.com/login?tuuid=ee23ab7a-a2b9-4512-8973-fc787eb3c01e) to your **Databricks** workspace. 2. The Base URL is visible in your browser’s address bar after login. For example, `https://YOUR-INSTANCE.databricks.com`. #### Warehouse ID The Warehouse ID is required to query Databricks SQL and fetch audit logs. Follow the below steps to get the Warehouse ID for user configuration: -1. Log in to your **Databricks** workspace. +1. [Log in](https://accounts.cloud.databricks.com/login?tuuid=ee23ab7a-a2b9-4512-8973-fc787eb3c01e) to your **Databricks** workspace. 2. Navigate to **SQL Warehouses** in the sidebar. 3. Click the warehouse name you want to use. 4. On the warehouse **details page**, select the **Properties** tab. diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/index.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/index.md index 40e17fcc75..5a2d38e236 100644 --- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/index.md +++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/index.md @@ -272,7 +272,7 @@ In this section, we'll introduce the following concepts:
- icon

Databricks Audit

+ icon

Databricks Audit

Track user and system activities to support governance and compliance using Databricks Audit logs.

diff --git a/static/img/collector/databricks-icon.png b/static/img/collector/databricks-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..d6cf3940e63d8e1b2f6bada3a7a5880dd09f84bd GIT binary patch literal 22332 zcmcG$c|26_`#*l4SuJBJ+mx}DP{g#*P@z`=bzS#4=Q`Ke6FAdXPiLSG zLP&3_-=x_H8Nf#^F@p}jmZpA~0Kc#evwbI`D=&H9;lLnp`rOIB;_1C^HvjW~fN|s_ z7-DRkJ#!A4l=M=R^Ybb~^Pf$fG+}ORRde;#eV@F!J7ygUBMkEqeLkHvS1RbKsDG$! z!j%P#b+oK?Tr#HXj8cw)kpDma6A!8o)*@8(p*}GP;a7&t5+R3>mZ=4feDtpSL~~s+ z6TPc$EA^3LS+#Zb|G1*8W&Xxo^zJ2l>Ui2-N?aBxTyB3{3HC@Wl4%t>F6(A z1j|H4`}@=!b>O4Ji`Q$^tfkc4l7Aym-~a?LPo9?V8POlz-H4h&;qUGy_<7wxtbzCc zT^D$>R)aMIlhNpecK3<;?Dmcr1AIz9v6AgMPNZe z+!X#48ZH@##+G5IN9_SWe_}FsKHB&<2f)RkaNr|DJq$n(cOMBdo?`m2?q-}$H2jk5 z;}-P@|0m(wp6xvJ$`YNRnAGqw_P^Tg4Dc5~`dcBTFk~et^p+U#V4WJ%r+{wN0Mfa# z2MnqHU&=TCSNU_x{{`^Dy3Iy+g5eHSIYA#ac2>Yo zZp5<_TY&z*Yr&@cYj!#u%|~3rphA5dus5JY8XZo6HSwFR`utw_)izqf#Hn$jH^hj^ zLX_JH6fDIw5cp`m2*pm7027EU0J{j(wRM~^7jM7)jR2;pn801u6gT|mfE*JS6LUgf zI0f7Ic(m-kF}ly3)K3quk<7SLRWs?Hf%eSwNY#d!+W5w+<2wf`a{z7mFyt>nsdAP( z3PkE#pYB0q>}ZHAn-|@Bhe4py#;VaVKM16_vgh`glP>+aNc{{`#>F>zTmsMz#`M1v z_5lH1j@FWZ?~AiRpk(8{w6l2(7QS0me12>m3>xE(JbzE~dgQI1e~~%)opcBv=@836 zYFQnraxKGfETyZx3=r^%ewh>!J~6A>f8Yohp^0n!Uu7^@qU|sH(RqV4C{w(4g+us9 zl9>;Tr54iS(f_+R3& zl+RbzJcI$3;G5)mQJ+PZ{!XqQ(%NGR#wEiOtw*w`TOon+3kL|~ zfFxtzaMmMhN!q5Vw+?AeGzA}`6h_9YH2{i=KIIRob(K#QA&wZZdSkKr0dqi#wZuNd z-c7^c*N)9?)>14GC5*lg(nvkkvyvUv;9Fzd%H#2JAWUhlAvX{?UlBf<(_9Q9l=$pEAlxty>Nh)#|PPGW8 z(XAzLJ`2TP@H#)x879(sRutb@QBm4qTi7Kn$Uw;OXor^L2N^89N~88a&JIMi6WuZr zKW~u_L6&K2>+>}s^QGJ#B#4?mw+C5p(NdP+|A=uNqRl}!*a9##3-L5&rOHE|p8>bd zpwUJ61C29QT7&r<@kKg43#k@eppe9G)ZcFnk+M4R^Od1MXJrQ}t*nLF{|szBKSo33 zFn#q-WH?Ny0m2dcQ4D7O)0n^8gO55rP7ju1S}}(15WQS7l|bRd%d6Q3G63`5wRe*! zNi4z2f0~7`y$jw^lpeBhy#|UkM|{FYiouVio?+Fe*rH1-P6V+ZLN>4j=RZPz5GWDk z)Na17Tyryan)*g+4Pw-of1(Z{8 z@xHJekaAZlr1frqXlm>9{hPhvOUoyq#fL_hNxAN~Hf7ym;$svVcDVK6npC;vGKe$) z5b(;HjsFf@(HF$GR=?Pd!8!{re(R3F%T|g7FAKlh<(U19iDUYZ0$eiq(Bq%+$g-fb z@{Pv$_%jeNXLr(M00P(}$BfbDSW9Y#&ttPh2VZWs(dG~Xmwi6$HZp9}C9Tp?l;>5XFrAD5uVsvrcNW9`h?f3DS)4!9RUO*T4opN&G6*JuT&_rs_ zaxAOM2~f@`DXKBRHM;Bb1FFFkETyiw=Jmd8zA^LFjqhl+^)}j>GQH)W)oZKXPwO7> z`sM0CB3j`-Bz?EJtnLw#O@#dlP|xtp_3(asQtR^4U$s^QlBwpEVZ?XKhgaq+<;iq< zAPzljm8+z}ooiTAZsppZ7UH5O)7NiF8U>zg+5~|NXaT@?|;BxSZiQ3XCCTVlT zI`;}!_AHxShGpS&kf9?OH^X&J+XoskH>qb5oG25T&7{#|Q%BCZtih!?nZy<$E{uTe zf#gvFt=LijsX#qpfDJv6xHmt0qCVbvXxw=B$qmCO!Tecen6>0<{zQFk&i_bt8w!}kVQvkHokv#j*q}m35LkwhQ+k@ij%fJs zq20NTER4m~dFzKvrO~-)3UJxWP&&fa-lwxn2nUOoAv$q=%hR4EN3ePq@Md+oiTJt* zcH};R;+OX#<}ZMyIs#ryVU0l+zWv}tP^W?Q>VoX4P`mj!NdLzB0;x%cB&m)N9X;5~ z*uf>iUs*5ubAfq~%6t6rW6iL_q2Mtl51cDzcdYZM5Yp%lq_+(lAMXuNdRP#2iZeq$ z?L-dYN98b!kCK5ZeNLO1hIZI!+A7xiep#JDM?7oWx-*c;|E~9<*4x4Q!278`r=h;H z=6S~sc{*tzJeFd-n;#oj9vLEIu)3V=@&}C2=YTu4Ii#*?*Z5)^AX$vRuQAamT3sG& zEzKJ#Lc!`YsdTVlc=`}Naq5ifk${i8C}8vRFsye0nR|7gyq<5%_l|lZwh!46zMMx6 z@Az$bYSqaBicCFNmp|}Yl^E|}<1X_*mOs8V9*oy8P1eoWb;?cY#QG?t={JkHBiQx%4Mq^9aE=z)CVPsj<`L2;5k!uk z2)AtSj5wlP))8dT=W1hdR_cQ&FT&!rSPPICi>;-_QDAICzfdD4W$v)uG;Wr+Iy7%& zfSpey?%Qva&0PLw8mm5kRli}u3_dBiJl4h}Hz68VjenJh*_NcNt#E zi#-)S)t!pyp8m^FdfOSqdM+&!4%^*&LMjJ6sS>2Jvxg%o)+9IN3PJp)^ zw*;fN#Y_&$dA@aNR}VY3ArPGpJ&RcNtqbd2I+KhEe6foT@op_l+hWz0rhR;jh^VJC zMRo!m5s|Y?wPKqyF5SBJR{R&+`EK9phcUv({P}T@@nD5knUF3>7iozIqnAkk$7CIm zxB98@$K<~(PUWi0XnOHCJ#MO;l89L2s*Letq&1Ey9VN%Ix>=lNe>kc8vMkN!0nII_zd_{tGa&LPO(Sy43`DnFp+ig; zEB@7S8&D(t{T_CWSEj*-01rE^vp<1SGK&^2w_M)E;=tvJm{9B&Nf3uT%!zxWD8p$o zP;>u?_PFdXZQ|DX#}dP?O!vluv2^W}HZu+M+m1$o=;n)^+P78A`h4KRMuIU#Kn}NW z!j=(7yBFu0$(m@2c`pun94JYK;7o06%lpgDcp>4 z(A$i97r3y~aigxUeIHauz zAC@E81DfK|FnC|Fmnb1(&O*ZK#wlVeA$f=S{xmY|s~$XZm9 z$+lOR6WG_32bJFu6L740B7 zT^;z99#c%?hquh!=1=CR6P+nRL8KhZYR@&)xe$mZZr8BLp8A3<%Q0<|(FhjM5!*(_RbW z&!NKNiXJUkJ@M8}Es-I?5_{j!e9$2Rhnr#?T9@0kEuzH-Xk5+eXOq$PZlQYOjjPmT znDg^4^`Xt|@*fzX$OzlokFdtSy3AdhgjkpgD`&-C{ANeT!V&v0WQsMeN8(`z)GKLN zE-pMMVIe!Z|xPki~?}Uxd0;Y zYkk>>mJd!?Op~QHX*mInx;IsioA8+w4r1^PMsm*VunOy#YK?DBFYnJy$Qt^?2H$+L zD_oECiTc%Uj6J9CbmPa{zHBqYlI0(>sy~`ehGo&$UmK~Hl?mZvMO_{ipZ^R#s@HB` zU(-8LQV>&ExM$fC?yjxV=?;O!lp_3CnI4Mlb^WQXe6Rn;?~tLYtLgSMS!ydo#T!g? z-PHTMrDrm({p+s1D!)+A8=tyHzaH-${R}aBxDaDK z`iaE9Q7qkymh8^&ved#@8$=3Q1}(XVSxK`dNR#^D2iwt?p9HCE%}B3l%)f$lpOtIz z+dX1AI~Nc9ZH7HI?9U^l=*vuox`ol@D?Btu6#XsF?t(&wT{vD zgdiF?uCDg9t5)lbMc&dSyVN>-Sysp{cfR_h33XzSk2YUn@`9@!O3tNm(&;`WavCT8 z{b{>Z$vfx*2A9v?W!B`6OIMw|;37*(wjbJeDl8k(1Hyb}yy#Yb%)P2Pcl|Vj8yjj~ zGlm=hGNE#{=0bmw=)2G3JG5+&nNELDNZ}c%6F*1vI|#=%h`Nr>r*RzkXK&1+j&_^- zQ=lm^p!B-GHb09wjvXc6NRM`jZ*o4U|8D z9-7bJ!3kc`G>+4+rdu&V$CQ))I#M_u8jy_)ZtxH8RO!byjHfX@0XY%GTj$#Ha=YRo zebegM1T0m}TNe~`Yj)QuNIGf4?di$Q%+L_%h5JxWR-s@DbnL7C;5ne)tIu%D$&^x>j|PVaoA=l+_YQ=P zAeG+67HjckRlPPX&Lf+~Q$oOGuX|!JIsH{*kE*e?wc10&OadyMg-hSpJ*{25Vty=2 z{IA;9hQ$Bq6;Gui@V_U@I)iZO;qyf7N`=ts{~-Nc`a4?Vgq4Cm=)X}{rN(3>l^%hj zSn*7dCCz&&HAx?003H=vv&RW+!4P6s=ExrLkp(~cjMeCH|5IDOACqZ7{eb%SsJNUb zn~jfuwE#*f$_z+DkqC3vd0wJVcJ)!K(G$FTmh@ve#`_nX71HI)czMR@%toU~(u@j{ zm0aqa1Dm-rVx1p_Xs5e-DxEIESS!VD>?sl^x3a#cwPnz#RtgS#y*HKU%^d^Y<>WkH zRQ``-duiHsui4>P37NA6U* z8CUYsH3YXd1c}QbM`met9V{-Tu5nfO1E9W8`los$-!IP?b5ozcFb*5WX9y{BU1s8y@_FaN^J zDxBEWJxvkycUgALqivx~I|*fDWEpqL=jR^O=Hnov9rA+U#uMu&XJi)apPvW&AUR?U z0LFl!yAJI`9{BwYxuBUEC2C`X9~HT(qiFtbweb)gvM~NCYdLMnm`8_{&!9*|fVSFVW@+UUxv4B5n5#^|@3IC!ipZUPA z9>NZjjGz0jLiKaKl!T{$qz4BOk>@-l#{hix* zmhd#o{Ah}?ay>@&AyX7SehM_`wjUgE+75ODbGDrXgEYP#HQZp7uApVZFd9c>!`2uN zbiTZB&ueZi8-GJ5y)%+yTc`a+RZ+F-84xMgG)Nj;Icb9 zYJOAnuFRbBU3FLHWV9xT{-W~M8+R`6I)doqo^KK{KLFw4%sMh= zJSDrOy^mWkAPy@n(c%-X3w7P^t{WrW+E0YO0J*p)@Kp3+inPb5Y32o3@>u$$r8N*B zn7ZgRyWSbgal}}%)a}335lNJ?05yW0W}KpRD%A1`S6{*k`MB?vi>4`#odu(yKF*WdqT^A$0>L67gD?b_AvDVW!_Zj zaM-V`7hFr40O8`bMj`=#mP#8z?1uSLJ>Z`I;2L?Bcr4A7$x88F>)K``b*96S%aT5J|;TuBA?n{M-~^F$B)C>Z<)rmDPEMKt^G*|*pA6NzkkT=iA2 zUza|lCfa>)?)5MKFfnDtmKR(IPR(fZlT}oxTQKYnZ11+y^UnL6QAwC+gi2pN3tvGfn@p1;+PMK+1Fpf}BTUF`{x z_WczPo-SPSg`jYy_ImZM`C4qrya^E^yz+)fC?c}Q(E}`h>WsT#MQQupIjB>) zPc!1JE=%cF=`8X$SLi7E<&Q#%iPU*!%w;n4s}SRsz1P zb$`ZVI7kn6A*=~GM4hK(cpgSxtuPcBk};r~eG?!2!Vbh#PE7g4+nTzFlz;Sq!>){O z6}8gu?JjsM2q`-a_AX!RgHOOSyZp;<2=6Q+CDUh6Qd_HGlh+lDgdnmeBC8w5=!YXg zx%0m=C_|?d_(t3G>5t@9(o&pGP}=!$5iu2?g^h0l9{I&nzLRGvu8y#vacI1Lk0FRc zhy$1PFcwzwksNOQz|UDxcU~I~)%&AFK=-d2&xbaS>FI=RA##yRY19J`*KnNzKfNTc%4PFo=>=>J-v zm|Q%j+_%b5M3$Fk@8r$-5nlkLWC0XUU0EL~7cT*lm-KK5i#vo+2uS!VfNQf+UkIx_ zJ+%K11VH0vDr!QASv5dKx`24S*}X!bD3Ys>jA|Q5<0Ow=&I<;9FRlY9bF~zoTiWBi z3NJrKic0WC7gzL!&}pVg7O&IdD<=2F0_JN%9WB83(H&*FDp%KHM9)T!vWgu}WLYC@ zDw(WGfs9i58dP%G!P1(&F;e->#aeu^4WwSr6}KagX(?CJ;Km}?fZ4I`9FwmW1D_UD3c!l>I@Pq5=^k>Z2B_{l} zGHJ$=URP$fA>(yd-9f)S4Tnj+_)!HdJyjOZTN*mAI3Pkh&3tpiW1KZyR7sMI1O%w6o$R-_QdVN3C4(=yhXkw@!&12&OEPmc5E z?s@zkKXI@kMg6wB-&<5Vm(oAuNz8c?#1stHpKnqQT17 zb1b?RXV4UtPrx~+>TeA0R4yhn7q;FXA`WVMe@QV;@9=`_(4QA)_h~|CXpFbP6Dm*9=%a+vCh5e z84dP>qZE5k07EAH6`ypQ@Y3u3iprU?!YQ2fTr&Os6MNdYVJo!br#7UGqw{nKf`&B* z4A{;q-|MW{|MRYw!8m6a{W$Y(5dlSs=T^WA%l*`-*hwNEy;$F;{kx8Dzd)<7sL!YI z`7_{^48Lp%{=i~*mN$GZ@*eO6-d*$gF%PL%MQ((RMEaE;Y|(Y5@e;wzpvgL!_$7Mf znoSgJJu&iU$vnij80r-cpQvS8BCnQ9baRqVU`|}n8}!GrXdtOLgJj;wG4?XO?v=ke zokyI-a`hLvNx$ans#pSVcn7hGTy5?q5F&I zyxLT@>EQy#%^UEV3gbGMYHVxahHqOim2O836h>+WED6}eAW{H66W~{FO`!A2cLP`P z$3B}mZvsgy0e%cdiVph!mT<(egQ2{}fIR*|NFLd)fb6G7tENrHu7pibRi5bfysYnn;`;%m=}Xm&Zu!m45 z5M_2kHM>fme08f_evjcf6+*`QC&u&GM80@0?GBH)kJy1*QDQN}`5?i9(w+1%UGVz{ zF*#wxMybSKnS(QET}S4Q^CJgohg0Ugibd>AK8aQSur*GH77tMc}t!vA$^lC$CtVQ}4$=wEdE^(7&^ z!WE+z3`i)QvFBfVy$sIpua|2Nw(U$z^n^QxC$;vpa65dvhxl0L06lRLVKBNskoaSo zh)Fhp4~U~Q!N#c;MU&poRo@1={a`SR+77@R@O|@<1AG4s#DQ8spN>&qMoE!#CNc2B zGG96mcsKz$MGiB98zR6Bt2iHh%KICP*TgU7hKuxygTxcfXf#dmu-;R$=W`Mb_!NDC z2v{~mJ6@450-reIK55rhWj?DL{5KoLQz_Pj@uGhak0e{GpVeKx_eo0JrdL|~-sn_% zY4!(jKqEMAbl}(4dBr=qqMslxyS7_Z2e|qSxJXaitQCfTIrDO@lvqit+^Rm{F=bkb z`roAg$rA5|@TMX*VXtSutaC{J^;Y#D?Pi)B^4N`1R#QH4ymAbIjkY3|z!m2~sCpQp z)4DQFZpf5B^-S)lFkokD$qpd5vR~)_9sA=lpi}7>Z~Nl_NWozwssQdffAA6Omfy= zUpVFOdZ`dLXX*lA^xXtsOtKk@YK*5(`=VSWbsBYt;sa5gj z_32fG)K=%MNBL|aTe%je8xs2&5b}G~qISP~6zKO-p{oOe0M#OI$rG~~>crx>tLu1) zG>5Q}dK@RSEW$}-C!$ZSl*|~*Wt>QFt2?v&W5Y(-0-qSC_VFoWMt=#u#pL10oLw@Z zjD?r>+iTv1Ve`rM$zv2DU=Uoq&Djw)1JO-TPWnuqL+_ ze-Vv2WD`<0D~W~wF*78G!42evSKsq7kvD$A%<1UTgV)|HAWqA1)XJz7C`KQ|M05g2 zVW+mzc4mnU$a`Kv;wYnaa8K;S5G@-}YxX z4o?`br*EXoDe>L&mfdSTNzcH@o`O+vnxWYj`q*L%eQdRxt=j%KD8iF_plO5;X=HV%q2p=l|WIn~E@^=|O_n*%tk3P{Uop4Yuc5amTB6)Eiq`6Ya%O^T?{lG<}U{ z%=Xa@&Ng(FSKp@MqZN=xu_qSvEo*7W3@tMiCzJ29ks+CVQwKEmEd&3BUe^R=gtLRf zdo&71TtkS?PPO^>6Y3vekj}W2mwj{ZWJ*|1{u9`v;K7}XSd5}uH@cN;p>9CM3b0k2 zYL)NiVha1s-Bz0jo6^O5`sRT_an0|odh+gWMu--FHJ7+?gUO@Z1%B8L8pbH-5J00U zZ%gYaOCL*D0e6BEY8ssV@?`(7%&WiFLwamCa0YY^%f~1vwspo8i?BqBx=)`Dchm+Y z^&hU`dw6~Ny=QOOc=3D0h{Z7dOV>N&Za8Exc~n+Lkpsf3iAaoXO&H7~%XgXx77$CQ zqsP*Q=amf3c?adnv3Mn+_DH#l8TXyj$^gNJ!q7Ed^u$D7n=yuAoTcl z)T$Ex_$K4OCKY97H^TvQ8xHUC*TqmaM1l>018zh@yOd8 zT6`y_|3o03AxZ3Uoynqh3zabk8EpIzBSkKQCf*Y$^mPSC>*_2bJ#DRt92e8|BugEA z#_^;#ZZN*osh*&vtUTjyJOPf%lIdSq>Xj3t_l?j}@QL#IBCkgS(5XxE8$nj4h9opU zjY?@0&bX0!@&OwQtr|@9K$XO5397W^X(`%HAt;5!{IYLw^NhD9e4#41UWAHvzN7|! zbp@A6&AZGS{9-7GW+`E_v-&rdG0P@qw+Y_tW+dg8cRig}ub;!`MY@xld>*ZU@(a!+n3BYSC$C zsqNf8T$LiLx7`VUyjCr7BDu3xSq;-t%qkXgXDqLE-aKJeNQj?4Eq+mJ^3TG6OzSa< z{kFIJF&JGtY7bv}dl91C`Sw9wM%UrmWwn%*rKSb&D4O}E`^*YnS4($yNs;>YVerw} z+F6;4^F1fC@W>;3sTse2`9oRaj#M)Dk`|O626&G9X#&-Z5t}AM1*5#}3WUdSl6wux zSTxn{hLmmH${Ipa@j)}%@#$CyRWeE*40SOq;ay_<T&dRZh94lxX4E&PphoV5L7N znnDfZS-g6-h*=W&+iqz9)Lj`}6Ejn47nUu-O7mv-gYl%TP;VyvcQlXQG8{^_n6v5n zB6xIGJcJ^zH4&uD1|+SQQ1`Mj{jP_N^PI@_Uq%2MB4+D}BT!iU%M^}&@xA3`ZG z7E?E`+gbUiCHpH&T?~3fk+9Ec3Pm@eq$7Hc(hPLn$JwmCcSpU@&ok891h${YQgGYb zh#U2FG2SNRDo3&3qd(X8G3f-|+$9*?v5)?2yLneglj=Se|7^0<1g^J-8hIm72VAUV zgD3irU8BCe@MvSQmCRhkoKIO~Xi>oKpb99{f{E9&%b+NO%@<{GLw-k`HZ2&jK@^nm zqv7)hfy}(?!hz<^@B~#kQJ)!2myCLH#x?6`X1sg;65BC~0MW9yL&bdW$I`F&^;CHq z=R-A}QFQkT3gEJiOcgUCMf>?Zz%wkTn!BG@aryMU@$ZihkG z^0tPDMZVn8TUu*jZNHZhh|WD>I{iZD?_;Cin+0~OS5;lAs<}+q+Oh7O{-@YH_s~~I zg+v!>BQe$0ZZ)5o*XAKh-Pd(Sid&5ym-L$%>i8|fM%-nRe6B4#REBSfnTzL73K*}q zez~@JWM|Lo&1bRrp<7zZtP`=6=^m}dNSNfD)*F`Xp|H(RS$vASWKcBtwrF6zm?kmJ zEBqmiI}>+><$jXL^a)%`Z`pea$~7>=ve6NdR~j#`NnKW8Eh(M&JBCqhws_2Yct#p0 zY)#@R_BCE=@ZI`m#nzKpiu`xWSycCZ{2!GAJk&w6Y}2@>sKn%q|07=;52_S2HzP(H zx6*RXq))J@)K(eY2>nJkU4Nr!Kt1=?Q+PP1aaS)47|#x+9tox!9z?8!%kA&pQWn^2 z&q8#s7_o^(BQ>a+-FOJGEMMJ8p-}dY`VGxiaLalT9?iOrcxsEt5jN9A4egF7;QbJc zGj7- zcN+Vm?TqK!Z8ykQYGXrcbh{v`#eYlKhj( zfYQuviakE@>!LF>YAIDL_mNF!p9QDE(Bh_!&)$w;L45WM8aH-VaoiPp9#s{%Ln#kq zxyKJ4;I3=V6k(jvkyoz%AZC)io1sKTSo_+swR4e5W8LO$6QHRVh7N$O8U@C<|5#g$ zBgph>Z}{i^Xk~ZWe^hhChi?Kxv8TLUsV6@C!H$|$XYJe5t29$O;#fnwJt1+a6fm7e zP89y~S?p+LIz~?MK&)2%>ez#pJmO)Z)ohRtB=K ztWNb&Us;L!z?+qsWX7@P(>Ykm4a&4E{YCGsOYdMQ%^gFa224M+ab~`wSJ|w^m3Qx4 z8xAh9Goh6NQZBet9N&O_le{ zq+`xtTzbL7;gJ6IA^n4~qQ@9SFSq_;Z+wC>G|K|6PV;e zYHXgc^h*EOdMC-+*e&bBH1-GjDT{}p3aD!0(jP`$pQ}9AAC^C}BB349LotvIQI_UO zjm=y1a^|U|{euJ4`cAnTHfWvEi6@ ze4zL7b5tg5=dHa0wJjG{fDgp1vsd^(ZK-*C@ahI|@OGYKK3zTxxs3RC)L{MfC(|1> z6hq{E^!!>l2Zb)Awi>1C(-nFmc*mV3pwQoi`Y;6{mm=}`(pKM!**}P_1qKUMO|O1d zYEcl!Qk5=uiiuozX>rG>^=`z~jjP za;VFlO4&-{QOo0nI-rq-3FS{?tD3$&WlSA?3gcEM+ql2S11qst}jn z+EjkEAAvJ!f9OQrc0lE0fJVs5brsS(XBqPoEdRU%fV4;tsn7&(7yyJ52Y1vKzxqt= zO8akIC5B^EV5AbK?xwjQU6E)_)kT9*ub$MId~2OaMU<^6=ba2xkbN!Ag06PJnt0`@RfTi_mQo*(HI-M`Z8a7Chg3dSeQF@Afr5%>MVn^DNrRXAYY)p;P_ft_E=#ML&V@8oK+-21 zPv-42F(=D1!G=_*#KmXPPfw!A{j+&Q*@$;f>U7u|kLT()pZ*K`eq^j>BfSujP%wZj zYtZ<*OE<`1xSqJ4ifnMF%i_B?bI{4sTm1;t1I?`s)XF2$bpwynMUUu=B;87J@2H>6 z5q6`Z-{EiarkAv8X+O%pAEyWR*7b^zgzsw0ZPdj;{$qwa2f4UFGgLBNa@sXx(}mOT z>n4RWxPk|)i$>e2mx)f{t6}bAseE*BSyWm^T9cP>7PM+87_TR$jNSP7*_?HTB0`|B zeQouSmNEohU*fc}nRUV|zx~4(Yetr5cWH?sZxtC;yw|`)Se=Eaf@kgET;uTy27LfevhTaH|Hl%FQs*IiDMS3 zZ3n})Bl?^LXIkUc=93e*oV{&L;Ba#dH&sH-G)eyL&Xup>3wlUpE4jdho;7_ac|^cF z)1~kR&+g9eIr~aLbr0HwdO)J;y(GH`?x1HZMbc{W^GgCuf8?Wo|20lp8Je{ zMw(G0b$=5sZ|NECLABs4IU8PU+~wu-<&7VY;yAqR+u}U=SL($&+z8yU_k8EM%h*He z)dy8!b@Q+J<^EI`4cxaB78TIUy@#!*$tf4_qi1gEY3bQ&acwPdO5N7@9^8JR|0Or* zV2C2ix9AEAet-s5&U`Z7YAO_+<^mY-{Z4pWdSC{J#!)<*A`N&ylPn(s5yjV!pS2G2 zwFFNi=F1-T=4<%i5kRtt*L69M$r~^l{Any`Pm#TxeSI$23xa|=Sh(3uATNtJX0>Mu zd)YbgCNemV)#T+6#TYr6YO#RAk&{gAYzHcemN&(#=iI=^a}QzOW2t@4pO^tYg9)_X zV#>ghd%g$9^!_P_ryul%*bqLP4E6>!BkHqbgU+RM0Wu4}eDp~bIHRpeY4dT+?!if)@RJ?AyGuG=+* zl2*55E$XtHLD^hVI$sj`3Sh?G7TWK3e0BsQKURU74fC?2Ab@%@E`gc0N{ zwf7z^MZ@RB6z1GwCT|p_heC8s^=b=|x*M=M)d%~nL$Q}BKywTR11BfsU!oUh$@fuc zLtlMB3R}>O+xO3 zq>n-+w9Qr?IpR{k`uCXEOpNtG;o!P!(?>4*X293W%OFK9I;Gi}e536E2AU6~pS&*+ zdrn6k5lDr&R23r~v&?DFMMyemBZJY%$~f6_JVW!O4>0=%elD6kYF*D92Divqv*ae8ogQWk zHIEn#RJWOAz}#YZL=Jc}6k6_d1*Y%zLro(bS}8{5{2p_|3aTZsmouPK%njX5O`D~u z1UQN#{+_5xp>ZO1x1OZbA@PV4)X=H{0|P8gf+el&_YcbzTVZ>z1aza}VxN!!ci*Zc2`%AaxlwOKR0Muv&Jzi8>>H;#2-~ zB2?#2l|s*`A=w*Tc6E2Q|BsVTJzl-*JF|fD4-&g;kOaWRedDS{)j4Xru(ScM_ID28 zO<4=WibY4tHxs^^jt}+G*?(x9YAf=W1N$-bRF%JpdxNP;Ot|d%qMqT)Tj$Zq>3wt} zacErYUkvJr&<@fR*)PQ96TKCx8IjDqEtv0}0`>7|`b;`S+Hle#%Pm4bo)IkFX_ICa z7tsI4Ru}JqP+);RD8Zel_gzUJuVG^68C|sr0;$(50N`XrUcHtHk})!8i({#DR3QT{ zS%&%Y%|A1g*dlFNJ2X0(qnBUapAI2zK`o;rdA8(QmB*j{g4dFUij**55~USHHIEj1 zLK$b&$M5-S^;}@Qo}=KJ9~wy&(FAWHQk`9mtYNlO3n&0g_8D5FDB5|jujU$TeU*nXGtky8_38p- zaUD;6&6;?(*R^M6!>WZjOnZ^P=;eZK61gySQ|nm!JJG-WTi>2jj+LkCiO7?=!zS=z z?J|(qX8F96#Db5JM|y|+ng?5>|81GHy&&kJeH3|O$2}o`=kfte@r3A~7nkn%GXn*q zO2itbYL5G5entG-;Cq-=Tzds#wa$nVbt{>;OHzjoJ#B^6&*ldC;sUAMaJ;@~V)V~O ztI}OBzcTSiBh`4?^e4{hs&YwAElWMIjK${<>Hc~q)d$5!eB3jRKh$F^Pq(A}guJjV zQmbq4%Nv8cm682et5`c9v;{m&(v2rZN%PmwB~IfHf;ggU?YCu_y*i2s4J3M4ZbJYQ;h4GvX(H~|U{!nTnPM6~Xg@xZ4TN*(l zyqT}l9HYqAJ#LB<)Op&(=#pV5*N?}SK9ar=Vxo4lhw!PPyz=66=buMz>!9u0&G!3( zF4I6LE|AT?_aQo^L3aYi7SYPTlh;nct|s#46-jNw+6(hE9J}G#;m}wN=SA0keVM|G zee(pq(YJ)|Wv#zRrzA!P=_0yob2B!(EDGLpOkR+|+)b~zdPHH2Oc5)r%yae7dcoi| z>`@XdN;JG%N3f_LYHk1%KWH~Qcw>o5-Q9HEEyGAdBlf~Z<4=3(Kts#`YyEI9N!%<{ zv@wvt(uvQ6j=)%qJ_Aent&2RDN0|e9Z72O)c-G_^vTtTernu+`o(tg>qERp}7@SR= zjfr^C-dUq^m0(6)+b$&2V`v}-ui8>~%Xobykq@`gY+Kznh_CLcAA0!jLqY0>}l_Op&EX7 z^FK(^IGy|(B{J_~;@CrJNOMCF5fyXLo;J5|l(ebt(JbPh4hvi$9(pByg0QUPMToC< z_0Diw#eOgz?6uaf{>(l=c?jKOzG~P*w_@PB_l&TrJvR%+6dC708wneqm}0+&-bo|e z6!h|r_wDZ)&L@q<4kQXJ`^AYO9nhj_r?eD|D3MXo#_Q5LRs!0|I~NgL9f~DB9OGS9 zC9Y6y(WfE^1hJ!n-(o8UF1l`>bV^I?az^)bQ}LN=MwI^^O8+eHjV_SZ)lS79|mTn%%^@&L$g`WQiR4=@7wdQ@wZ=xp<@btJob?BB2TMFqc? z(jkmcw=&3tJ(EW4Y}|t&Ux-Xk4erW~wSj+NZxpBs8L~|IqmU3RQBQ?*+~+H5WV2Bv z#2of~*fC3q5av#vo*kSA(mL7;cLS3$sTGCIC>SeU zdIs@DG|85VL&fjvY>Sm^A$pVREkd`_`WUoR49VY8kk)1L{+L`xfR@;H#+Ec(#2@H+ z;4==|T72>(W>oRh-M~ai``70=@%KZq(&t+aI6<8Jy0gKc)3erCTuB(5v>E^1qkP*1 z+M3{M19&v%UbL=q2pRvX4U(Rf00egDB=CZm$ZZO;B_z{cB`J#Twc^ z6T?6ME59K7<=<|l2^CLef#krcfL*1Q`H$lXm=|gNzHmsEMKKI zooKoTf+c_ByF-g(&CpE^_1$~ukuRv6j1m<_r2W23#f5iZ*=y^V%lH@FEeBS6^Mc#o zJnzu3FbNn*@iY-n-+fBUTEDriyuVQ;D*+bYUb3b&<*Tl}#z07>>3y+QSzh;rfQwW+Yhob_%tznKO>G+R3$$BV|p5V(1&y4Zz2UkY(0gpGBqH zqTb-z>q8mTp3?j?Xo;6xXC#EteZThslbEf3%Q86B%3bEd=Iv-gH zfY9W(j{D<@rs!0NViGc5KYi~?+IH=}WFR&kxt=I#Xy z%y?cKKAFDq)e7ADF!P|Qa7_t|yWaEfiXV{<(D1E8j9*J z#HAUK{Z{yqK0_2~P|t=k%?xcO>3IA^8QOn&;)-*cHa}vkn&E?WxgF9~q4L%JV=r;c zx}+dKdVn!r0XmJd#&#bO;o?7Vb;P0 zi-y%uFtilkR=qqok|TyM^A?q79wok=s&^quR@UYC&%-K#hHjPiWvX8jan{?e)*;qD z__T#$DgO!7vr(tgXrooBeB}`*__%DN)h-(K4T)b*Q{5ypA_jp#tMeR6A?Yc(>%kG1 z32{`@**yEtP|(J$_u~&BQ{@^?ug^m8l?ShTE811>A0L#XUdNJ%pxZQA;vi6F&xJoU zK?7m=96B%b8J%C&FP}>WPN&0)37e#KGnS+6JnhSve)&X1GwxId9fxkpQkZriYXJGm zPcv-{an)U^OM3QhS`6RghVMJ5gW?<%E9fC=+C{q8Sq}BxZ5++e-gxOY;UWQMjpkDC z0#Jh=*=hFaNwic*O|)OF>1jKet*=_DJxDUe1zD9cK@y&y0f4G6KL=d z-yOM#YCQC&l{!*|d~i~{y~{j0ugwfz$ZUg_vpxbx|L4qk1Ye;w%<2jY{qC%ICZucv z255Y5e9U&9{|fkf7P?vbJc8|KhwHFbEs_E!z2P62lsRgH7Aj`MWyg5(BE%vr?O{Z zmMbeufBHi8mbsYW+N$21nnaLcLJVL1ae9;e>QVMNDDmu}vSIf$hwnp5+RnE-iF zChVQU$Xfpc9+UZq*c`8~Wt8L%|z$#-5eJ>gIFYdaZe2lPL88psQ}^d?;+!^``0W9KZ3CJ%TK{5?6@; z*FW%Q2Otf^GcYcM8gxo#={rfruRy6p+~!W@Qz4?>l_HHNXSm>*Vg38}DPtz=?}Tqv zb)HEDZQOdXRQO1joU55Eg7-XIE+d7HajWhC5)syks`o!>ikGQnMQNBmU;!p@pA&k} z&rUfln~{H*?nmy6?-~JrsQ@bW#eaX+Ek#8^1HL6?&N0DzWih^md+4*cQ%0S~o<(6( z0?~vBG_t4S`hG|E1#7ei2v5Y#)SdA6(BhI?s7x9Zw6bnF9lpT?q$(_GPpa{qUjMI_tBq-^3d85#(iMj5I+hfp z9aLa0WVqsHfKCRN$r#3MID@Q?VH>}2h+7Adffl%h81Snywjq@nFlw@l4T@864%VAs zvW^V-F_mf!V~h`pe3XGOprtW!&yzld#rpdYI(d9oc-zG6@-p^WV zBx;$GET^+k$MWphPV3T>Vc}spuSv3yXSM_<-pVVN;*chD{L;HK4Sf;3w5ahWisLY2 z*Q3Dt9IyBvhYvw^j7^q6Y9z^nQ;d8$n3pPvL@gU=sq{((HkfCMwV%nfSN=d(a`Fi= zOFrws%4(jek?c+u9^qK975Nk)d3#Kg{r}*o-y6~-i%;bHCp1Ku$XS-Zp_XkXqB4@z=^3p;86;>T4l6i2_3k20J>oJ}HxO6%QW11NVQ~XU;`JoE2^D zMbnU1vt1VUM&a)8XjCqglD5QQ?t9lq-u&856z-!JPXa2Uz_1)l#+7%efZ9=^3yKY& zcg|I+rv2##O|C+wT_xsQPaYsaVZ&6iy7a@$O-w9_a+t?{JL8oaWYf>jfp1`OP4^1R z3FX!S5K)|vKuDmYC<&+4DQ47FUMb(-*{44zCRQ^C4F0Pdt8b409V4H@{Q8MRSs04J z$vs`o^wgmqOMJe~jtcoE>GO39i<26XDvIHLC@lkh+@e_U1CVhGwD7#cPHbbU;G=M!{z3c&5-9rcJZ8 zXwO8T@@}-4sL+MQTqXoxUueW^&N8{_TyKu&cP8B?#3L+VOqe4f{;XSPz@dwqo#YC8QRT38VY5SxIN zjN6ur0Xle+laIuZRp@@NR9$rhGroI--x9_mGtsm{7>wV5qp6yfPz`%+tW8Y=z Date: Thu, 9 Oct 2025 14:23:25 +0530 Subject: [PATCH 03/11] Update databricks-audit-source.md --- .../databricks-audit-source.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md index bb16501c07..28f8ef655f 100644 --- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md +++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md @@ -42,7 +42,7 @@ The Warehouse ID is required to query Databricks SQL and fetch audit logs. Follo 2. Navigate to **SQL Warehouses** in the sidebar. 3. Click the warehouse name you want to use. 4. On the warehouse **details page**, select the **Properties** tab. -5. Locate and copy the **Warehouse ID**. +5. Locate and copy the **Warehouse ID**. For example, `bd4dc8ef7e54782c`. #### Client ID and Client Secret From 1db798491e4263dc42ac29ef75dba239850de073 Mon Sep 17 00:00:00 2001 From: Amee Lepcha Date: Thu, 9 Oct 2025 14:58:04 +0530 Subject: [PATCH 04/11] minor edits --- docs/integrations/product-list/product-list-a-l.md | 2 +- .../databricks-audit-source.md | 2 +- .../cloud-to-cloud-integration-framework/index.md | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/integrations/product-list/product-list-a-l.md b/docs/integrations/product-list/product-list-a-l.md index 82c859ebc0..f9bd88393f 100644 --- a/docs/integrations/product-list/product-list-a-l.md +++ b/docs/integrations/product-list/product-list-a-l.md @@ -186,7 +186,7 @@ For descriptions of the different types of integrations Sumo Logic offers, see [ | :-- | :-- | :-- | | Thumbnail icon | [DarkOwl](https://www.darkowl.com/) | Automation integration: [DarkOwl](/docs/platform-services/automation-service/app-central/integrations/darkowl/) | | Thumbnail icon | [Darktrace](https://darktrace.com/) | Automation integration: [Darktrace](/docs/platform-services/automation-service/app-central/integrations/darktrace/)
Cloud SIEM integration: [Darktrace](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/91f4544f-6118-4bdc-8b30-01f045d20e4c.md) | -| Thumbnail icon | [Databricks](https://www.databricks.com/) | Collector: [Databricks Audit](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source/) | +| Thumbnail icon | [Databricks](https://www.databricks.com/) | Collector: [Databricks Audit Source](/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source/) | | Thumbnail icon | [Datadog](https://www.datadoghq.com/) | App: [Datadog](/docs/integrations/saas-cloud/datadog/)
Webhook: [Webhook Connection for Datadog](/docs/alerts/webhook-connections/datadog/) | | Thumbnail icon | [Dataminr](https://www.dataminr.com/) | Cloud SIEM integration: [Dataminr](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/0019f757-3674-4688-9d6c-063366cfcfa9.md)
Partner integration: [Dataminr Pulse for Sumo Logic](https://github.com/SumoLogic/sumologic-public-partner-apps/tree/master/DataminrPulse) | | Thumbnail icon | [Datto](https://www.datto.com/) | Automated integration: [Datto RMM](/docs/platform-services/automation-service/app-central/integrations/datto-rmm/)
Cloud SIEM integration: [Datto](https://github.com/SumoLogic/cloud-siem-content-catalog/blob/master/vendors/1E4721C4-DC98-456D-B0DF-80365924683A.md) | diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md index 28f8ef655f..a5d65b0fbc 100644 --- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md +++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md @@ -11,7 +11,7 @@ description: Learn how to collect Databricks Audit logs and send them to Sumo Lo import ForwardToSiem from '/docs/reuse/forward-to-siem.md'; import useBaseUrl from '@docusaurus/useBaseUrl'; -icon +icon Databricks is a unified data platform that supports data engineering, machine learning, and analytics in a collaborative environment. It offers enterprise-grade security, compliance, and governance for data workflows. diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/index.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/index.md index 5a2d38e236..dd94479320 100644 --- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/index.md +++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/index.md @@ -272,7 +272,7 @@ In this section, we'll introduce the following concepts:
- icon

Databricks Audit

+ icon

Databricks Audit

Track user and system activities to support governance and compliance using Databricks Audit logs.

From ae32a36ab0fa78ee69588fa6b9566cb3388f6293 Mon Sep 17 00:00:00 2001 From: Amee Lepcha Date: Thu, 9 Oct 2025 15:45:45 +0530 Subject: [PATCH 05/11] Update docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md Co-authored-by: Jagadisha V <129049263+JV0812@users.noreply.github.com> --- .../databricks-audit-source.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md index a5d65b0fbc..1465b31878 100644 --- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md +++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md @@ -27,7 +27,7 @@ The Audit Logs API enables you to capture structured records of user and system ### Vendor configuration -The Databricks Audit source requires you to provide the Databricks Audit Base URL (API Gateway URL), Warehouse ID, Client ID, and Client Secret to export to configure the source. Follow the below steps to generate the required values: +The Databricks Audit source requires you to provide the Databricks Audit Base URL (API Gateway URL), Warehouse ID, Client ID, and Client Secret to configure the source. Follow the below steps to generate the required values: #### Base URL From 53ef008a377ec0eaeecefa7639c35c019a722323 Mon Sep 17 00:00:00 2001 From: Amee Lepcha Date: Thu, 9 Oct 2025 15:45:55 +0530 Subject: [PATCH 06/11] Update docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md Co-authored-by: Jagadisha V <129049263+JV0812@users.noreply.github.com> --- .../databricks-audit-source.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md index 1465b31878..29c5982334 100644 --- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md +++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md @@ -32,7 +32,7 @@ The Databricks Audit source requires you to provide the Databricks Audit Base UR #### Base URL Follow the below steps to get the Base URL for user configuration: -1. [Log in](https://accounts.cloud.databricks.com/login?tuuid=ee23ab7a-a2b9-4512-8973-fc787eb3c01e) to your **Databricks** workspace. +1. [Sign in](https://accounts.cloud.databricks.com/login?tuuid=ee23ab7a-a2b9-4512-8973-fc787eb3c01e) to your **Databricks** workspace. 2. The Base URL is visible in your browser’s address bar after login. For example, `https://YOUR-INSTANCE.databricks.com`. #### Warehouse ID From 8cd2cab055edc3a141bc3d1a3749c23c92851177 Mon Sep 17 00:00:00 2001 From: Amee Lepcha Date: Thu, 9 Oct 2025 15:46:05 +0530 Subject: [PATCH 07/11] Update docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md Co-authored-by: Jagadisha V <129049263+JV0812@users.noreply.github.com> --- .../databricks-audit-source.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md index 29c5982334..b4e22530f6 100644 --- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md +++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md @@ -38,7 +38,7 @@ Follow the below steps to get the Base URL for user configuration: #### Warehouse ID The Warehouse ID is required to query Databricks SQL and fetch audit logs. Follow the below steps to get the Warehouse ID for user configuration: -1. [Log in](https://accounts.cloud.databricks.com/login?tuuid=ee23ab7a-a2b9-4512-8973-fc787eb3c01e) to your **Databricks** workspace. +1. [Sign in](https://accounts.cloud.databricks.com/login?tuuid=ee23ab7a-a2b9-4512-8973-fc787eb3c01e) to your **Databricks** workspace. 2. Navigate to **SQL Warehouses** in the sidebar. 3. Click the warehouse name you want to use. 4. On the warehouse **details page**, select the **Properties** tab. From d85ad3de7ef1085349a33c89359b95bba5f8b1cd Mon Sep 17 00:00:00 2001 From: Amee Lepcha Date: Thu, 9 Oct 2025 15:46:26 +0530 Subject: [PATCH 08/11] Update docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md Co-authored-by: Jagadisha V <129049263+JV0812@users.noreply.github.com> --- .../databricks-audit-source.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md index b4e22530f6..38ede27006 100644 --- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md +++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md @@ -62,7 +62,7 @@ To configure Databricks Audit Source: * green check circle.png A green circle with a check mark is shown when the field exists and is enabled in the Fields table schema. * orange exclamation point.png An orange triangle with an exclamation point is shown when the field doesn't exist in the Fields table schema. In this case, you'll see an option to automatically add or enable the nonexistent fields to the Fields table schema. If a field is sent to Sumo Logic that does not exist in the Fields schema it is ignored, known as dropped. 1. Enter the [Base URL](#base-url) of your account. -1. Enter the [Warehouse ID](#warehouse-id) to fetch audit logs. +1. Enter the [Warehouse ID](#warehouse-id) collected from the [vendor configuration](#vendor-configuration] to fetch audit logs. 1. Enter the [Client ID and Client Secret](#client-id-and-client-secret) to authorize access to your Databricks resources. 1. The **Polling Interval** is set for 5 minutes hours by default. You can adjust it based on your needs. 1. When you are finished configuring the Source, click **Save**. From c4f1d406658195ef5e30f2f9b3d58ef7a4ebe687 Mon Sep 17 00:00:00 2001 From: Amee Lepcha Date: Thu, 9 Oct 2025 15:46:39 +0530 Subject: [PATCH 09/11] Update docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md Co-authored-by: Jagadisha V <129049263+JV0812@users.noreply.github.com> --- .../databricks-audit-source.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md index 38ede27006..2bd93be829 100644 --- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md +++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md @@ -63,7 +63,7 @@ To configure Databricks Audit Source: * orange exclamation point.png An orange triangle with an exclamation point is shown when the field doesn't exist in the Fields table schema. In this case, you'll see an option to automatically add or enable the nonexistent fields to the Fields table schema. If a field is sent to Sumo Logic that does not exist in the Fields schema it is ignored, known as dropped. 1. Enter the [Base URL](#base-url) of your account. 1. Enter the [Warehouse ID](#warehouse-id) collected from the [vendor configuration](#vendor-configuration] to fetch audit logs. -1. Enter the [Client ID and Client Secret](#client-id-and-client-secret) to authorize access to your Databricks resources. +1. Enter the [Client ID and Client Secret](#client-id-and-client-secret) collected from the [vendor configuration](#vendor-configuration] to authorize access to your Databricks resources. 1. The **Polling Interval** is set for 5 minutes hours by default. You can adjust it based on your needs. 1. When you are finished configuring the Source, click **Save**. From 364dd225b90514f2798ab58a10480a758b64ee6d Mon Sep 17 00:00:00 2001 From: Amee Lepcha Date: Thu, 9 Oct 2025 16:01:06 +0530 Subject: [PATCH 10/11] Update databricks-audit-source.md --- .../databricks-audit-source.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md index 2bd93be829..0d2cb590c5 100644 --- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md +++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md @@ -13,9 +13,7 @@ import useBaseUrl from '@docusaurus/useBaseUrl'; icon -Databricks is a unified data platform that supports data engineering, machine learning, and analytics in a collaborative environment. It offers enterprise-grade security, compliance, and governance for data workflows. - -The Audit Logs API enables you to capture structured records of user and system activities within the Databricks workspace, including SQL queries, job executions, cluster events, and workspace changes. These logs facilitate auditing, security monitoring, and regulatory compliance. +The Sumo Logic source for Databricks enables you to collect audit logs from Databricks into Sumo Logic. This integration helps you to capture structured records of user and system activities within the Databricks workspace, including SQL queries, job executions, cluster events, and workspace changes. These logs facilitate auditing, security monitoring, and regulatory compliance. ## Data collected From dbe80d55661e0f354bb984b554c2a0f96bb66b2e Mon Sep 17 00:00:00 2001 From: Amee Lepcha Date: Thu, 9 Oct 2025 20:28:50 +0530 Subject: [PATCH 11/11] Update databricks-audit-source.md --- .../databricks-audit-source.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md index 0d2cb590c5..402aefb998 100644 --- a/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md +++ b/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/databricks-audit-source.md @@ -62,7 +62,7 @@ To configure Databricks Audit Source: 1. Enter the [Base URL](#base-url) of your account. 1. Enter the [Warehouse ID](#warehouse-id) collected from the [vendor configuration](#vendor-configuration] to fetch audit logs. 1. Enter the [Client ID and Client Secret](#client-id-and-client-secret) collected from the [vendor configuration](#vendor-configuration] to authorize access to your Databricks resources. -1. The **Polling Interval** is set for 5 minutes hours by default. You can adjust it based on your needs. +1. The **Polling Interval** is set for 5 minutes by default. You can adjust it based on your needs. 1. When you are finished configuring the Source, click **Save**. ## JSON schema @@ -106,4 +106,4 @@ https://github.com/SumoLogic/sumologic-documentation/blob/main/static/files/c2c/ :::info Click [here](/docs/c2c/info) for more information about Cloud-to-Cloud sources. -::: \ No newline at end of file +:::