> “Which pages are getting an unusual hit in the last 30 minutes?”
A good statistic for this is an exponentially weighted moving average, which can be computed online by a leaky integrator using a single accumulator register per counted entity.
It's not so much as counting, as estimating a rate.