Basing on customers' purchases I'd like to make a proposition of what item can be probably purchased if a user had previously purchased itemX.
Seems the command arules can help with this but I got no reults using it.
My dataset is a list of transactions with major fields that I intended to use: user_id and item_name
source=transactions | arules user_id item_name
Am I misusing the command? Or is there another way to get the desired information in splunk?