nsmcp::AccessAnalytics method correlateWarnings (public)

 <instance of nsmcp::AccessAnalytics> correlateWarnings samples \
    redactor

Defined in /usr/local/ns/tcl/nsmcp/access-analytics.tcl

Correlate bounded warning examples with retained cache rows only. The existing start-time index bounds lookups; no raw log is scanned and no ingestion/backfill is triggered. Addresses are never selected.

Parameters:

samples (required)

Up to three dictionaries with requestIdentifier and timestamp; optional userAgent and userAgentMayBeTruncated from system-log diagnostics take precedence over cached User-Agent.

redactor (required)

Redactor applied to returned text fields.

Returns:

Rooted JSON triples with sampled evidence and explicit missing/ambiguous counts.

Testcases:

No testcase defined.