Splunk Search

arules command returns no output

iKate
Builder

Hi,
Basing on customers' purchases I'd like to make a proposition of what item can be probably purchased if a user had previously purchased itemX.
Seems the command arules can help with this but I got no reults using it.

My dataset is a list of transactions with major fields that I intended to use: user_id and item_name

source=transactions | arules user_id item_name

Am I misusing the command? Or is there another way to get the desired information in splunk?

Tags (1)

heshamzaid
Explorer

put the search in the smart mode

0 Karma

jeffland
SplunkTrust
SplunkTrust

I'd like to bump this as well.

0 Karma

aljohnson_splun
Splunk Employee
Splunk Employee

bump. I'm confused too.

0 Karma

gmahajan
New Member

Can you share some sample of your data ?

0 Karma
Get Updates on the Splunk Community!

Get More Out of Your Security Practice With a SIEM

Get More Out of Your Security Practice With a SIEMWednesday, July 31, 2024  |  11AM PT / 2PM ETREGISTER ...

New This Month - SLO Capabilities, APM Advanced Filtering & Usage Analytics Plus ...

More for SLO Management We’re continuing to expand the built-in SLO management experience in Splunk ...

Enterprise Security Content Update (ESCU) | New Releases

In June, the Splunk Threat Research Team had 2 releases of new security content via the Enterprise Security ...