I have read all the documentation, and have a test environment for MineMeld, but I still cant work out what share levels are being used for. I was of the beleif that it was green=good (i.e. whitelist these) and red=bad (i.e. block these) however this doesnt seem to be the case in most the current prototypes. @lmori Said the following, but I am not quite processing what this entails if it is different from my above belief: " This attribute is added to the indicator by the Miner to signal to other nodes in the graph the target audiance of the indicator, similar to the Traffic Light Protocol. Typically this is used by input filters in Output nodes." - https://live.paloaltonetworks.com/t5/MineMeld-Discussions/About-Share-Level/m-p/77537/highlight/true#M102 A simple explination of what share levels are indicating would be much appreciated.
... View more