A computer-implemented method for managing alerts comprising: receiving anomaly triggers associated with detected anomalies; associating an anomaly trigger of the received anomaly triggers with an alert; establishing a state machine by creating an entry in a hash table including a hash key and value data corresponding to the anomaly trigger for which the state machine is being established, the value data including alert profile parameters, state information, and actual measurements; the hash key including a key obtained from corresponding aggregated data and a metric type from an associated alert profile; tracking the alert using the state machine by applying transition rules that process the anomaly trigger and requests from a periodic scheduler to generate and update the state machine, store data about the state machines in a traps table and an event table in long term memory, and generate alarms; determining whether to change a state of the state machine if a subsequent anomaly trigger associated with the alert is received or if a predetermined amount of time passes without receiving trigger information; changing the state of the state machine from an initial state when the anomaly trigger was received to a preactive state or remaining in the preactive state when preactive state conditions are met, the preactive state conditions including receiving the subsequent anomaly trigger associated with the alert in one or more periodic time intervals, but for less than a duration of a predetermined poll interval and without a gap of receiving the subsequent anomaly trigger for less than a duration of a predetermined maximum wait time; changing the state of the state machine from the initial or preactive state to an active state when newly active state conditions are met, the newly active state conditions including receiving the subsequent anomaly trigger or additional anomaly triggers associated with the alert of the received anomaly triggers for at least the duration of the predetermined poll interval; keeping the state of the state machine in the active state when remain active state conditions are met, the remain active state conditions including a severity characteristic of the anomaly triggers received once the state of the state machine is active matching a severity condition of the anomaly trigger that caused the state of the state machine to change to the active state, a gap between receiving the additional anomaly triggers being less than a duration of a predetermined maximum wait time, and a duration of time remaining in the active state being less than a predetermined maximum duration time, and generating an alarm based on the state of the state machine. receiving anomaly triggers associated with detected anomalies; associating an anomaly trigger of the received anomaly triggers with an alert; establishing a state machine by creating an entry in a hash table including a hash key and value data corresponding to the anomaly trigger for which the state machine is being established, the value data including alert profile parameters, state information, and actual measurements; the hash key including a key obtained from corresponding aggregated data and a metric type from an associated alert profile; tracking the alert using the state machine by applying transition rules that process the anomaly trigger and requests from a periodic scheduler to generate and update the state machine, store data about the state machines in a traps table and an event table in long term memory, and generate alarms; determining whether to change a state of the state machine if a subsequent anomaly trigger associated with the alert is received or if a predetermined amount of time passes without receiving trigger information; changing the state of the state machine from an initial state when the anomaly trigger was received to a preactive state or remaining in the preactive state when preactive state conditions are met, the preactive state conditions including receiving the subsequent anomaly trigger associated with the alert in one or more periodic time intervals, but for less than a duration of a predetermined poll interval and without a gap of receiving the subsequent anomaly trigger for less than a duration of a predetermined maximum wait time; changing the state of the state machine from the initial or preactive state to an active state when newly active state conditions are met, the newly active state conditions including receiving the subsequent anomaly trigger or additional anomaly triggers associated with the alert of the received anomaly triggers for at least the duration of the predetermined poll interval; keeping the state of the state machine in the active state when remain active state conditions are met, the remain active state conditions including a severity characteristic of the anomaly triggers received once the state of the state machine is active matching a severity condition of the anomaly trigger that caused the state of the state machine to change to the active state, a gap between receiving the additional anomaly triggers being less than a duration of a predetermined maximum wait time, and a duration of time remaining in the active state being less than a predetermined maximum duration time, and generating an alarm based on the state of the state machine.