Window Types and Operation Options

Window Types and Operation Options

Purpose: Control how data is aggregated over time to determine alert triggers.

• Tumbling Window

• Fixed-sized, non-overlapping intervals (e.g., 5-minute windows: 0–5 min, 5–10 min).

• Ideal for batch processing or strict time-bound analysis.

• Sliding Window

• Fixed-length window that moves forward by smaller intervals (e.g., a 5-minute window sliding every 1 minute).

• Useful for continuous monitoring and real-time insights.

Aggregation Operations (select during alert creation):

• sum, min, max, avg (for metrics).
• set intersection, distribution, concatenation (for logs).
• custom (advanced users for tailored logic).