Managing Bucket Size

You can manage the size of buckets in an event cache. That can often be important in controlling the use of memory.

You can limit the size of a bucket to the most recent events, by number of seconds, or by time:
eventCache(instream, 3 events) e0;
eventCache(instream, 3 seconds) e1;
            
You can also specify whether to completely clear the bucket when the size or time expires by specifying the jump option:
eventCache(instream, 3 seconds, jump);
            
The default is nojump.
All of these options can be used together. For example, this example clears out a bucket when it reaches 10 events (when the 11th event comes in) or when 3 seconds elapse.
eventCache(instream, 10 events, 3 seconds, jump);