windowPeriod=1 hour


What if slightly expand window period in order to ingest all events in range of one hour for take current and little bit historical events too? Does it somehow affect the speed of indexing and query speed on realtime node? We have case when 70% of events are realtime and 30% have 1 hour lag.

Hi Max, longer windowPeriods just mean data stays on a node longer before it is handed off. FWIW, for delayed data, we usually recommend running a lambda architecture.