Sandspit is always a tough catch here. It did not appear last night. It did appear 1-2 Aug, which was that spectacular DGPS night we had a few days ago. Even then, just 2 decodes. That was the night I got Alert Bay, BC and Biorka, AK. Which brings up another possible way to decide whether decodes are real or not. Look for associated stations. If I get a bunch of stations (or higher decode rates) from BC/Alaska/West Coast then I can assign a higher probability to them being real. Likewise, if I get a bunch of Euros, or say I get solid decodes from Azores and Madeira, and there's a few European stations with just 2 or 3 decodes each, it seems more likely they are legit. I've not been seeing any European stations in the decodes lately (which is how I expect it to be). But if a bunch of them appear on one night, then perhaps they are legit. Closely spaced logs (on a time basis) are also signs they could be real.
Likewise if they are at a similar time to other stations from that same area. But not necessarily at exactly the same time. I'm not exactly sure how to describe this, but it seems like there is a blob on the map that moves around. The blob is of unknown size. When the blob is over a station, you get decodes from it. Think of it as one end of the propagation pipe that connects to your QTH. Some of this can be roughly estimated, not only can't I get the west coast stations until the path is dark, but it also has to have been dark for a sufficient amount of time. Maybe that is so the D layer has time to completely dissipate. In the summer, you rarely have that much time before it gets light again here, so the west coast stations are much tougher than in winter. For me anyway, propagation to the west coast is best just before local sunrise. I don't think this is any sort of a greyline effect, since the west coast stations are not on the greyline. Rather I think it is because that is when the path has been darkest for the longest time period. Likewise European stations usually come in best just before their local sunrise.
I do keep the minimum number of counts set to 2, which keeps out the riffraff. Turning it on to 1, for last night's decodes I get one for Sandspit at Monday, August 7, 2017 08:53:32. Which is plausible. But I also get China, Russia, Germany, Finland, Azores, etc. at completely impossible times. If you can't produce at least 2 logs, your station is unimportant, and I do not see your decodes.
It's unfortunate that there is a lot of human/manual interpretation of the decodes required to decide what is and is not likely to be legit. It would be nice to further automate it, but I am not sure how. In the end it sometimes boils down to a judgement call.
If jFarley is reading this, I am curious what his observations from NDB DXing are. Or any other longwave DXers of course.