Getting Data In

Databricks to Splunk (Error to load up job results from Databricks to Splunk)

lucasdantascc
New Member

Hi Guys , 

 

I have a query running in this job ID on databricks:

new_job.jpg

 

And , everytime when I try to transport these 5 rows from Databricks into Splunk running in this job 18363943 , it only returns just 1 one row at all:

SPL to transport data from Databricks:

| databricksjob job_id="18363943"
| eval event_name = "Fraude - risco na selfie", severity="High", source = "DataBricks", jira_update_comment = " "
| table-result  event_name , severity, consumer_id,biometric_origin,score, source, jira_update_comment

Results with only one row:

image (2).png

Could you guys help me with this solution or show me where I'm making mistakes writting the code?

I need a script that returns these 5 rows.

Thanks for advance.

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...