Question:
When I export the Raw Data from a scan report and then count the number of occurrences of a violation, the count is higher than the number of alerts in the report. Why are the numbers different?
Response:
You can obtain the total count of violations from the raw data. The report shows the total number of unique component coordinates with violations.
In some cases a component with the same coordinates may exist more than once at different paths in a scan. The raw data will show an entry for every instance of the component at each of those paths in the scan. By contrast, the report consolidates those entries by coordinate when presenting the number of violations to remove duplicates. This means that in some cases the number of violations provided in the report will be less than the raw data.