and{
         event a: temp{var A},
  exists event b: and{
                    event x: t{},
                    not event y: k{var A}
                  } where { {x, y} within 3 min}
} where { {a, b} within 1 min }


Wird zu:

and{
       event a: temp{var A},
     event b_x: t{},
 not event b_y: k{var A}
} where {
    {a, b_x} within 1 min,
    {b_x, b_y} within 3 min
} group by { event a, var A }


Die Subsitution für das event b darf nur die positiven events berücksichtigen, d.h. "{a, b} within 1 min" wird NICHT zu "{a, b_x, b_y} within 1 min" sondern zu "{a, b_x} within 1 min"