First... no knock is the best knock. But as already mentioned, getting readings of KR on the MS3 and MS6 is pretty common.
I've personally found there are three 'types' of knock retard (KR) -- in other words, I get KR readings on my DashHawk in three different scenarios:
1) KR at WOT
3) Very short blip of KR upon lifting off the throttle after accelerating in boost -- normally in higher gears but not always
3) Sustained KR readings while cruising at light load / light throttle while being between 3-4k RPM -- normally in higher gears but not always
So, the first, KR at WOT should not be taken lightly. A KR reading of under 1 is probably okay, but if you consistently get higher KR readings while at WOT then you need to take it seriously.
The second form can probably be ignored. If it is real knock, well, you've just taken your foot of the gas and my theory would be the engine is rapidly ramping up the spark advance to account for the sudden drop in load and perhaps the conditions exist for a split second for a knock condition to occur but quickly go away.
The third seems to be the situation that is most prevalent and what is confusing the MS3 on the whole. I've been doing a lot thinking, reading, data logging, more thinking, and more reading, and more data logging. I've come up with a theory. Someone had mentioned that the ECU 'learns' around knock retard. Lately, when I am cruising and I get a knock retard alert on my DashHawk, I purposely do NOT lift the throttle. What I have noticed is that normally the knock retard is slowly 'aged out' or decays over time. In other words, if I get a reading of KR of 6, it will slowly work its way back to 0.
Take a look at this log from a few days ago; it has a long sustained KR reading going as high as about 6. At one point, I had a KR reading of over 5 for about 10 seconds.
Specifically, look at the relation of KR and Spark Advance -- when the KR jumps up, the spark advance briefly goes to 20 but settles at about 28. Then, as KR decays the spark advance slowly increases until it seems the spark advance is too much and the KR reading jumps back up and spark advance is retarded.
So, it would seem a reading of KR does not necessarily mean the car is knocking. Rather, the initial reading of KR would indicate a possible knock condition but after that, not necessarily. The reason is that if the engine were STILL knocking after an initial retarding of the spark timing, wouldn't the ECU continue to pull timing and the KR reading continue to go up until knock was eliminated? For example, in my log, if the KR were a reading of actual and, more importantly,
continued knock, why the heck wouldn't the timing be dropping through the floor with the ECU in a panic attack to get the knock under control????
It seems more that the ECU is alerted of a knock condition, it retards the timing, and then begins to work back to the 'base' timing in the map. It's as if the ECU uses KR as a spark timing version of the fuel trims -- a short term (maybe long term?) adjustment to the spark advance. This jives with my experience -- lately I've ignored the KR alerts while cruising (for science, and since my car is bone stock... if it blows, new engine for me!) and every time the KR works back to zero eventually. Also, many people report that they will lift the throttle when they see the KR reading but as soon as they get back on the throttle, the KR returns. This would potentially imply that the ECU learns/remembers the KR for a certain engine condition. So, when you get back on the throttle and return to the previous engine condition, the ECU once again is using the KR to adjust spark advance for those engine conditions. The question would be... how long does the ECU store the KR readings for given engine conditions. If it is for a significant time, then it is possible when you return to a certain engine condition (minutes, hours, days? later), the KR reading suddenly goes up without any actual knock event.
Now, this doesn't actually answer what causes the initial knock in the first place... but, I have a theory for that as well -- at least for the random knock in the 3-4k RPM range while cruising (light load / throttle). Well, in those conditions, the engine is going for optimal fuel economy and optimal burn for the lowest emissions. Well, in such conditions, the timing has to be pretty advanced to ensure optimal and complete burn... maybe the default timing maps are a bit aggressive?