System and method for optimizing alerts for a user technological field

A system comprising:

• a memory;
• and
• at least one processor communicatively coupled to the memory, wherein the at least one processor is configured to:
• monitor a plurality of alerts of one or more alert types within a predefined time period, wherein the one or more alert types comprises at least one of threat alerts, asset management alerts, exposure alerts, health alerts, or operational alerts;
• determine a count of the plurality of alerts of each alert type of the one or more alert types within the predefined time period, wherein the count corresponds to a number of occurrences of the plurality of alerts of each alert type within the predefined time period;
• determine the count of the plurality of alerts of each alert type exceeds a predefined threshold level within the predefined time period, wherein the predefined threshold level corresponds to a maximum number of alerts of each alert type allowable within the predefined time period;
• trigger a storm alert corresponding to the plurality of alerts of each alert type upon determining the count of the plurality of alerts of each alert type exceeds the predefined threshold level within the predefined time period, wherein the storm alert corresponds to an alert triggered when the plurality of alerts of each alert type occurred multiple times within the predefined time period;
• suppress the plurality of alerts of each alert type subsequent to the storm alert within the predefined time period, based at least on the determined severity level of the storm alert;
• and
• display a notification related to the storm alert and information related to the storm alert, to a user, wherein the information related to the storm alert comprises a severity level of the storm alert, an identifier, at least description of the storm alert, internet protocol (IP) address, or last event time.

A non-transitory machine-readable information storage medium comprising one or more instructions which when executed by at least one processor causes the at least one processor to:

• monitor a plurality of alerts of one or more alert types within a predefined time period, wherein the one or more alert types comprises at least one of threat alerts, asset management alerts, exposure alerts, health alerts, or operational alerts;
• determine a count of the plurality of alerts of each alert type of the one or more alert types within the predefined time period, wherein the count corresponds to a number of occurrences of the plurality of alerts of each alert type within the predefined time period;
• determine the count of the plurality of alerts of each alert type exceeds a predefined threshold level within the predefined time period, wherein the predefined threshold level corresponds to a maximum number of alerts of each alert type allowable within the predefined time period;
• trigger a storm alert corresponding to the plurality of alerts of each alert type upon determining the count of the plurality of alerts of each alert type exceeds the predefined threshold level within the predefined time period, wherein the storm alert corresponds to an alert triggered when the plurality of alerts of each alert type occurred multiple times within the predefined time period;
• suppress the plurality of alerts of each alert type subsequent to the storm alert within the predefined time period, based at least on the determined severity level of the storm alert;
• and
• display a notification related to the storm alert and information related to the storm alert, to a user, wherein the information related to the storm alert comprises a severity level of the storm alert, an identifier, at least description of the storm alert, internet protocol (IP) address, or last event time.