Find The: Approximate Total Count Of 
approx_total_count_of
An approximate count of the number of events in which an attribute was populated with a non-null value, over the given time period.
For example:
- How often an attribute is populated at all, as the denominator for a specificity calculation.
- The size of the population an attribute value is being compared against.
Configuration
- Feature Name: The "dictionary" name under which the feature value will be stored and referenced by in rules.
- Attributes: The attribute to count populated values of. One attribute only.
Optional Configuration
- Default Value: A value that can be assigned to the feature if the attributes to calculate the features are not present.
- Scope: Can be used to extend the event search from the local node, to all nodes within the same organization all the way to all across customers (global).
- Time Window: Can be used to limit the Feature calculation to a specific time period/window. e.g 1 week. Default is
all; no time window
Use Case 1
Obtain the population size for an attribute so that a Specificity Of Feature configured with Normalize into Fraction of Total: No can be divided by it.
Using the Feature in Rules and Investigations
Divide the un-normalised Specificity Of by this population to get the fraction: the operating system on this event has been seen on 1% or fewer of events in the last month.
(feature('spec_js_os_month') / feature('total_js_os_month')) <= 0.01
- name: total_js_os_month
default_value: 0
time_window:
months: 1
find_the:
approx_total_count_of:
attribute: profiling.javascript.os
with_scope: same_node_instance