metrics.clj

(rstreams/ddt
       (rstreams/moving-time-window
        interval-in-seconds

        (fn [events]
          (let [total (reduce + (map :metric events))
                example-event (first events)
                total-event (assoc example-event :metric total)]
            (log/info "Evs:" events)
            (log/info "T:" total)
            (log/info example-event)
            (log/info total-event)
            (maybe-alert [total-event])))))