What are you using to log, I'm assuming EcuTek? Don't forget that unless the knocking signal is the exact moment the logging polls that parameter it won't show. Also, not all instances that could trigger the knock sensor will retard timing. That and @
Wayno's post answers the question.