For subject , write , and define the counting process and pre-event at-risk process by
Under independent censoring and a common hazard, each observed event-free subject has conditional event probability in a short interval. Therefore to first order. Equivalently the compensator of a counting process is . Dividing the observed increments by current exposure gives the estimating equation , hence
Here are distinct event times, the number of events at that time, and the number at risk immediately before it. One can also obtain the same increment by maximizing the local multiplicative-intensity likelihood : differentiation gives . This derives the Nelson–Aalen estimator, rather than merely naming it.
A censored observation contributes to the denominator while under observation, and then leaves the risk set; it contributes no event jump. For tied events, use the single increment , not successive one-event increments with shrinking denominators. If censoring and events share a recorded time, a convention is needed; counting the event before removing same-time censored subjects uses the pre-time risk set above. Rounded or interval-censored data may require a model suited to their observation mechanism.
For the distinct ordered observations in the question, let indicate whether is an event. The risk set at contains precisely the subjects whose recorded time is at least . Thus
Therefore the sum of the fitted integrated hazards at all observation times equals the observed number of events, the event-count identity for Nelson–Aalen cumulative hazards. The grouped Nelson–Aalen event-count identity extends the same argument to tied observations with their multiplicities and the stated risk-set convention.
Use the standard right censoring setup with everyone entering observation at time zero. At each observed time , the pre-exit risk set has size . The Nelson–Aalen estimator of the cumulative hazard function is
Censoring removes an individual from later risk sets but contributes no event increment.
Exchange the two finite sums:
Each event increment appears in exactly as many subjects' fitted cumulative hazards as there were subjects at risk for that increment. This proves the event-count identity for Nelson–Aalen cumulative hazards. Common entry is relevant: with delayed entry, a subject does not accumulate the increments before entering, so an entry-time subtraction would be needed.
One method for ties is to group observations at each distinct recorded time. If events occur at , use the pre-time risk set size including observations censored at that same recorded time, and take one jump . This is the usual events-before-censoring convention within a recorded tie. Since ,
Thus the grouped Nelson–Aalen event-count identity preserves the required identity at the recorded observation times. It is a sum over individuals, not an unweighted sum over distinct times.
A second method, suitable when ties reflect rounded times, is to break ties by small perturbations or an artificial ordering, then apply the untied estimator. The event-count identity holds on that new, untied time grid. It does not generally persist if all estimates are mapped back to the original common time. For example, two tied failures among two individuals give a grouped jump , so the original-time sum is . Sequentially breaking the failures gives jumps and , whose total is ; assigning the completed jump to both original tied observations gives sum . On the perturbed grid the two values are and , whose sum is again . This distinction states exactly what the second method does and does not preserve.
Another common grouped survival approach is the Kaplan–Meier estimator, from which one may estimate cumulative hazard by . Its jump is , not , and it likewise does not have the Nelson–Aalen event-count identity. In particular it becomes infinite at a time when all remaining individuals fail.
Assume the usual cohort setup: all individuals enter at time zero, each contributes one event or censoring time, and every such observation is included. Order these distinct observation times as . The risk set size just before is then . Write for an event and zero for censoring. Including the jump at an event time, the Nelson–Aalen estimator is
Exchange the two finite sums:
Thus the sum equals the number of observed events. Each event increment appears once for each individual still at risk at that event, exactly cancelling its denominator. This is the event-count identity for Nelson–Aalen cumulative hazards. The cohort and entry convention matter: delayed entry would invalidate the simple equation and require a modified identity.
For a counting process adapted to its observed history , a predictable counting-process intensity specifies
or more generally is a local martingale. In survival analysis, let record failures and record the risk set, including subjects at their own observation time. Under independent right censoring and a common hazard function , the aggregate intensity is , where and .
Writing , the conditional increment equation is . Replacing by the observed increment gives the Nelson–Aalen estimator
where ranges over the distinct observed event times. Censored observations remove subjects from subsequent risk sets but do not produce hazard jumps.
For these data the Nelson–Aalen estimator gives
Thus the six fitted cumulative hazards sum to , the number of observed failures.
The event-count identity for Nelson–Aalen cumulative hazards follows by exchanging the finite sums. With everyone entering at time zero,
This includes each failure subject in its own risk set. A delayed-entry dataset requires a different risk indicator and is not covered by this particular identity.
Under a constant hazard survival model, . Imposing the same identity gives the events divided by exposure estimator
Its fitted cumulative hazards at the six times are , again summing to four. It is also the maximum-likelihood estimate under independent right censoring, since the parameter-dependent likelihood is . This is a sensible estimate if the exponential survival model is appropriate, but four failures give little precision. The event-count identity by itself does not validate constant hazard; the large final jump in the Nelson–Aalen estimator also reflects a risk set of one, rather than by itself proving an increasing hazard.