Have you ever looked at alerts as time series?
blog.senx.io