Splunk Search

arules Given fields support / Implied fields support for same value varies

Bhanuchander
Loves-to-Learn

While running arules command across multiple fields, 

The 'Given fields' generated with various 'Implied fields'. 

But how come a value of 'Given fields' can have various 'Given fields support' values ?

Sample results like:

Given fields            Implied fields           Given fields support            Implied fields support     Strength
a1, b1                          c1                                 0.6                                               0.3                                          1.0
a1, b1                          c2                                 0.4                                               0.6                                           0.8

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...