Splunk Search

arules command returns no output

iKate
Builder

Hi,
Basing on customers' purchases I'd like to make a proposition of what item can be probably purchased if a user had previously purchased itemX.
Seems the command arules can help with this but I got no reults using it.

My dataset is a list of transactions with major fields that I intended to use: user_id and item_name

source=transactions | arules user_id item_name

Am I misusing the command? Or is there another way to get the desired information in splunk?

Tags (1)

heshamzaid
Explorer

put the search in the smart mode

0 Karma

jeffland
SplunkTrust
SplunkTrust

I'd like to bump this as well.

0 Karma

aljohnson_splun
Splunk Employee
Splunk Employee

bump. I'm confused too.

0 Karma

gmahajan
New Member

Can you share some sample of your data ?

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...