As the name suggests, it groups the incoming data stream by time. Timestamp which Flink looks are:

• Processing time: Uses the system/machine time where Flink executes.
• Event time: Uses an existing timestamp on the data stream event.
• Ingestion time: A mix of the preceding two. When each event arrives, it attaches the event with the system time and then uses these stamped time on these events for grouping.