1. A method comprising: determining, by a computing device, that a first event received by the computing device via an event stream causes a first pattern match candidate to be started for a pattern; computing, by the computing device, a first duration for the first pattern match candidate; determining, by the computing device, that a second event received via the event stream causes a second pattern match candidate to be started for the pattern; and computing, by the computing device, a second duration for the second pattern match candidate, the second duration being different from the first duration.