Patent attributes
A system for generating alerts including processors and storage devices. The instructions configure the one or more processors to perform operations, which include receiving an event from a data stream, extracting keys from the event, associating the event with at least one account based on the extracted keys, identifying a state variable associated with the at least one account, updating the state variable by accumulating the event in the state variable, registering a time stamp for the event in the state variable, and retiring expired events from the state variable. The operations may also include determining whether the state variable is above a threshold level and generating an alert for the account when the state variable is above the threshold level.
