Esper (used for streaming correlation and pattern matching) has time order windows. Basically within a specified time window size, it will reorder events according to their timestamps if they are not too far out of order. For real time streaming, that will delay event processing by what the window size is. For something like Kafka that wouldn't be a problem so much.