The Top Threat Types by Request Graph has a Info icon that describes the graph as "Trends of the top Threat Types being blocked during the selected time frame"
In this graph is the Entries for the Application and Software Download category, in a single hour, there are 2913 entries for a single user #1 for that hour. These are all Application and Software Download Category (site is api.skyscanner.net) of these ALL are set to an action of Allowed.
If these are allowed, then why does the graph info indicate "…top threat types being blocked…" when you mouse over the Info icon for this graph?