<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Path Analytics in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Path-Analytics/m-p/173323#M34860</link>
    <description>&lt;P&gt;The approach I'm trying out at the moment looks like this:&lt;/P&gt;

&lt;P&gt;mysearch for all purchase events&lt;BR /&gt;
| sort 0 + _time&lt;BR /&gt;
| streamstats count AS Eventserial by user&lt;/P&gt;

&lt;P&gt;| eventstats values(eval(if(Eventserial=1, product, null()))) AS Event1, values(eval(if(Eventserial=2, product, null()))) AS Event2, values(eval(if(Eventserial=3, product, null()))) AS Event3, values(eval(if(Eventserial=4, product, null()))) AS Event4 by user&lt;/P&gt;

&lt;P&gt;| fillnull value=N/A Event1 Event2 Event3 Event4&lt;BR /&gt;
| stats dc(user) AS Users by Event1, Event2, Event3, Event4&lt;/P&gt;

&lt;P&gt;This would have to be exported in excel and prepared in a Pivottable&lt;/P&gt;</description>
    <pubDate>Tue, 10 Dec 2013 10:01:16 GMT</pubDate>
    <dc:creator>HeinzWaescher</dc:creator>
    <dc:date>2013-12-10T10:01:16Z</dc:date>
    <item>
      <title>Path Analytics</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Path-Analytics/m-p/173322#M34859</link>
      <description>&lt;P&gt;Hi,&lt;BR /&gt;
I would like to analyse the payment paths for my users in Splunk. &lt;BR /&gt;
For instance:&lt;/P&gt;

&lt;P&gt;For how many users was "Product A" the very first purchase? Additional questions for this group of users would be&lt;/P&gt;

&lt;UL&gt;
&lt;LI&gt;How many of these users didn't buy another product afterwards?&lt;/LI&gt;
&lt;LI&gt;How many of these users bought Product B afterwards (second purchase)?&lt;/LI&gt;
&lt;LI&gt;&lt;P&gt;How many of these users bought Product C afterwards (second purchase)?&lt;/P&gt;&lt;/LI&gt;
&lt;LI&gt;&lt;P&gt;How many of the users whose second purchase was Product B, didn't make a third pruchase?&lt;BR /&gt;
    - How many of the users whose second purchase was Product B bought Product C afterwards (third purchase)?&lt;/P&gt;&lt;/LI&gt;
&lt;/UL&gt;

&lt;P&gt;I hope this explains my goal.&lt;/P&gt;

&lt;P&gt;Is there a way to do this kind of analysis in Splunk?&lt;/P&gt;

&lt;P&gt;Thanks for your input,&lt;BR /&gt;
Heinz&lt;/P&gt;</description>
      <pubDate>Tue, 10 Dec 2013 09:57:37 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Path-Analytics/m-p/173322#M34859</guid>
      <dc:creator>HeinzWaescher</dc:creator>
      <dc:date>2013-12-10T09:57:37Z</dc:date>
    </item>
    <item>
      <title>Re: Path Analytics</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Path-Analytics/m-p/173323#M34860</link>
      <description>&lt;P&gt;The approach I'm trying out at the moment looks like this:&lt;/P&gt;

&lt;P&gt;mysearch for all purchase events&lt;BR /&gt;
| sort 0 + _time&lt;BR /&gt;
| streamstats count AS Eventserial by user&lt;/P&gt;

&lt;P&gt;| eventstats values(eval(if(Eventserial=1, product, null()))) AS Event1, values(eval(if(Eventserial=2, product, null()))) AS Event2, values(eval(if(Eventserial=3, product, null()))) AS Event3, values(eval(if(Eventserial=4, product, null()))) AS Event4 by user&lt;/P&gt;

&lt;P&gt;| fillnull value=N/A Event1 Event2 Event3 Event4&lt;BR /&gt;
| stats dc(user) AS Users by Event1, Event2, Event3, Event4&lt;/P&gt;

&lt;P&gt;This would have to be exported in excel and prepared in a Pivottable&lt;/P&gt;</description>
      <pubDate>Tue, 10 Dec 2013 10:01:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Path-Analytics/m-p/173323#M34860</guid>
      <dc:creator>HeinzWaescher</dc:creator>
      <dc:date>2013-12-10T10:01:16Z</dc:date>
    </item>
    <item>
      <title>Re: Path Analytics</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Path-Analytics/m-p/173324#M34861</link>
      <description>&lt;P&gt;Perhaps you could have a look at &lt;CODE&gt;transaction&lt;/CODE&gt;s. Without proper event data, it's a bit hard to give specific advice, but perhaps something along the lines of;&lt;/P&gt;

&lt;P&gt;General search for paths:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;search for purchase events | transaction userID mvlist=product | eval path=mvjoin(product, " -&amp;gt; " | top path
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Second purchase based on a particular first purchase:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;search for purchase events | transaction userID mvlist=product | where mvindex(product,0)=="product_A" | eval second_purchase = mvindex(product,1) | top second_purchase
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Ratio of customers whose second purchase is b with no subsequent purchases;&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;search for purchase events | transaction userID mvlist=product | where mvindex(product,1)=="product_B" | stats c as total c(eval(eventcount=2)) as b_is_last | eval ratio = b_is_last / total 
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Hope this helps,&lt;/P&gt;

&lt;P&gt;K&lt;/P&gt;</description>
      <pubDate>Tue, 10 Dec 2013 12:09:19 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Path-Analytics/m-p/173324#M34861</guid>
      <dc:creator>kristian_kolb</dc:creator>
      <dc:date>2013-12-10T12:09:19Z</dc:date>
    </item>
    <item>
      <title>Re: Path Analytics</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Path-Analytics/m-p/173325#M34862</link>
      <description>&lt;P&gt;Hi Kristian,&lt;/P&gt;

&lt;P&gt;I've adjusted your ideas to my dataset and tried out some usecases. The results are always the same as in the approach I've described above. So both ways seem to be fine and now my only "problem" is to evaluate which one I want to use &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;

&lt;P&gt;Thanks a lot&lt;/P&gt;</description>
      <pubDate>Tue, 10 Dec 2013 13:07:31 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Path-Analytics/m-p/173325#M34862</guid>
      <dc:creator>HeinzWaescher</dc:creator>
      <dc:date>2013-12-10T13:07:31Z</dc:date>
    </item>
  </channel>
</rss>

