IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

CB ThreatHunter: Why are facet percentages not complete in some edge cases?

CB ThreatHunter: Why are facet percentages not complete in some edge cases?

Environment

  • CB ThreatHunter Web Console: All Versions

Question

Why is the facet percentage under filters on the investigate page showing a percentage other than 100%? e.g. 99.6%

Answer

Facet percentages are an approximation derived from a sample of the process documents returned in the search result.

Additional Notes

  • The denominator in facets is always the number of process documents 
  • The facet is the percentage of process documents that have the given value stored in them based on the search value

Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
352
Contributors