---
title: "Barracuda makes security logs conversational with Genie"
description: "Barracuda Managed XDR needed to make security-log investigations accessible beyond analysts who knew each vendor’s schema and could write SQL. Its AI-Powered Log Search integrates Databricks Genie into the XDR dashboard: Genie translates natural-language questions into SQL, runs them against customer logs, and returns tabular results with the generated query. Security-specific metadata in Unity Catalog helps map requests across network, server, cloud, email, and endpoint sources, while multi-turn context supports iterative filtering. Secure views enforce organization-level filtering before execution; scoped service principals and SQL validation add further controls against cross-tenant access. Barracuda reports reducing routine investigation time from hours to minutes and estimates that self-service could free 83 to 100 SOC analyst hours monthly, or 1,000 to 1,200 annually."
---

# Barracuda makes security logs conversational with Genie

[Databricks](https://yomu.fyi/company/databricks) · Barracuda XDR Engineering Team · Jul 6, 2026

**Type:** Problem & solution

## Summary

Barracuda Managed XDR needed to make security-log investigations accessible beyond analysts who knew each vendor’s schema and could write SQL. Its AI-Powered Log Search integrates Databricks Genie into the XDR dashboard: Genie translates natural-language questions into SQL, runs them against customer logs, and returns tabular results with the generated query. Security-specific metadata in Unity Catalog helps map requests across network, server, cloud, email, and endpoint sources, while multi-turn context supports iterative filtering. Secure views enforce organization-level filtering before execution; scoped service principals and SQL validation add further controls against cross-tenant access. Barracuda reports reducing routine investigation time from hours to minutes and estimates that self-service could free 83 to 100 SOC analyst hours monthly, or 1,000 to 1,200 annually.

## Context

Security-log investigations depended on senior analysts who understood numerous vendor schemas and could write SQL. This created escalation queues and did not scale across thousands of customers and partners, while any shared-platform solution also had to preserve tenant isolation.

## Approach / What changed

Barracuda integrated AI-Powered Log Search into the XDR dashboard using Databricks Genie, enriched Unity Catalog with security-specific metadata, and enabled multi-turn natural-language queries. Secure views apply organization filters before execution, while scoped service principals and query validation help prevent cross-tenant access.

## Takeaways

- Unity Catalog contains descriptions for security data columns and tables across network, server, cloud, email, and endpoint sources, helping Genie map user requests across vendor-specific schemas.
- Genie queries secure views rather than base tables, with organization-scoped service principals and validation that rejects generated SQL lacking the required organization filter.
- The SOC received around 200 recurring requests per month, each taking 25 to 30 minutes; self-service is estimated to free 83 to 100 analyst hours monthly.

**Tags:** [AI Security](https://yomu.fyi/topic/ai-security), [Databricks](https://yomu.fyi/topic/databricks), [SQL](https://yomu.fyi/topic/sql), [Unity Catalog](https://yomu.fyi/topic/unity-catalog)

- Source: [Databricks](https://www.databricks.com/blog/barracuda-makes-security-logs-conversational-genie)
- Source URL: https://www.databricks.com/blog/barracuda-makes-security-logs-conversational-genie
- Ingested by Yomu: 2026-08-30T16:59:09.130Z

[Read original post](https://www.databricks.com/blog/barracuda-makes-security-logs-conversational-genie)