Abstract: A method includes defining a root node for a funnel analysis query, wherein the query is structured as a graph comprising a plurality of nodes including the root node, wherein the root node comprises a point of origin for at least one funnel of the query, and wherein the root node is constructed to detect a first event that took place within a fixed first time range, defining a non-root node that is connected to the root node, wherein the non-root node is constructed to detect a second event that took place within a second time range that is defined relative to the first time range, performing a funnel analysis on a data set using the query, wherein the funnel analysis tracks an entity through a sequence of events including the first event and the second event, and initiating a remedial action in response to a funnel analysis result.