Window Types and Operation Options
Window Types and Operation Options
Purpose: Control how data is aggregated over time to determine alert triggers.
-
Tumbling Window
-
Fixed-sized, non-overlapping intervals (e.g., 5-minute windows: 0–5 min, 5–10 min).
-
Ideal for batch processing or strict time-bound analysis.
-
Sliding Window
-
Fixed-length window that moves forward by smaller intervals (e.g., a 5-minute window sliding every 1 minute).
-
Useful for continuous monitoring and real-time insights.
Aggregation Operations (select during alert creation):
sum,min,max,avg(for metrics).set intersection,distribution,concatenation(for logs).custom(advanced users for tailored logic).