xstream is a pain and more complicated CEP rules