A neutral reporting recommendation 610 can indicate that a selector 602 has no preference about whether or not to send a piece of event data 122 to the security network 106. For example, if reporting criteria 604 for a selector 602 indicates that between fifty and one hundred pieces of a certain type of event data 122 should be sent to the security network 106 over a certain period of time, and statistical data 616 tracked by the counting engine 614 indicates that sixty pieces of that type of event data 122. has already been sent to the security network 106 over that period of time, the selector 602 can make a neutral reporting recommendation 610 because the statistical data 616 shows that matching event data 122 between the upper and lower bounds of the selector's reporting criteria 604 has already been sent to the security network 106 during the period of time. In some examples, a selector 602 may also make a neutral reporting recommendation 610 if the selector 602 does not apply to the type of a certain piece of event data 122.