The image shows the groups table where the out of memory events are joined with other events that are within 30 minutes.