So what I'm looking to do is support the ability to detect multiple events that happen in a given window.
e.g., System Starts, Pauses and then stops within 24 hours. The event is relatively straightforward: Event Properties: System ID (GUID) Signal: (start, pause, stop) Occurred At: (timestamp) What I want to detect is if these three events happen in 24 hours together; the order isn't essential. >From what I read, using windowing with Hopping (advance of like 3 seconds) would work. I'm just not sure how the query in KSQL would look. -- -Richard L. Burton III @rburton