I have ran the sql script, referred to many times here in the forums, to get count of sessions per software services and url.
I see " " as the top one. When I broke it down per url and software service this url is reported for many if not all of the software services.
I also see many urls double prefixed with http and postfixed with 0:1:2:3:4:5: like this "httphttp://somedomain.com/0:1:2:3:4:5:" Why is this occurring?
is a technical entry and represents in the DB rows from zdata files where no operations are present - it was not learned, not monitored or the decode just doesn't offer monitoring operations. It's also used to sum up client-server conversations for all their operations. In general you should not worry about it.
In DMI it should be represented by hyphen when using dictionary for Operation dimension:
The pre and sufixes also have some technical role, but I don't have detail. I'll try to get it and get back.