Identifying discrepancies between events from disparate systems

A system, comprising:

• one or more processors configured to:
• receive, over a network, a first plurality of events from a first system, wherein the first system generates the first plurality of events in response to user interactions with the first system;
• receive, over the network, a second plurality of events from a second system, wherein the second system generates the second plurality of events in response to user interactions with the second system, wherein each event of the first plurality of events and the second plurality of events comprises a plurality of event parameters, wherein a first format of the first plurality of events is different from and not compatible with a second format of the second plurality of events;
• normalize the first plurality of events to generate a normalized first plurality of events in a normalized format;
• normalize the second plurality of events to generate a normalized second plurality of events in the normalized format;
• concurrently generating a plurality of event arrays, at least one event array of the plurality of event arrays comprising a plurality of normalized events that include one or more matching event parameters, the plurality of normalized events including at least a first normalized event corresponding to an event of the normalized first plurality of events and a second normalized event corresponding to an event of the normalized second plurality of events;
• generate at least one event array parameter based on the plurality of normalized events of the at least one event array;
• and
• generate an indication of a potential drug diversion event based on the at least one event array parameter.

Non-transitory computer-readable media comprising computer-executable instructions that, when executed by one or more processors, cause the one or more processors to:

• receive, over a network, a first plurality of events from a first system, wherein the first system generates the first plurality of events in response to user interactions with the first system;
• receive, over the network, a second plurality of events from a second system, wherein the second system generates the second plurality of events in response to user interactions with the second system, wherein each event of the first plurality of events and the second plurality of events comprises a plurality of event parameters, wherein a first format of the first plurality of events is different from and not compatible with a second format of the second plurality of events;
• normalize the first plurality of events to generate a normalized first plurality of events in a normalized format;
• normalize the second plurality of events to generate a normalized second plurality of events in the normalized format;
• concurrently generating a plurality of event arrays, at least one event array of the plurality of event arrays comprising a plurality of normalized events that include one or more matching event parameters, the plurality of normalized events including at least a first normalized event corresponding to an event of the normalized first plurality of events and a second normalized event corresponding to an event of the normalized second plurality of events;
• generate at least one event array parameter based on the plurality of normalized events of the at least one event array;
• and
• generate an indication of a potential drug diversion event based on the at least one event array parameter.