1. A method, comprising: analyzing, by a machine including a memory and at least one hardware processor, a time series of values associated with a metric pertaining to a production system; identifying a pattern associated with the time series based on the analysis of the time series, the pattern describing an occurrence of particular values at particular timestamps of the time series; determining a range of potential values for a next timestamp in the time series of values based on the pattern associated with the time series; assigning a score value to an actual value associated with the metric and corresponding to the next timestamp in the time series, the assigning of the score value being based on a comparison of the actual value and the range of potential values; and identifying the actual value as a candidate for an alert based on the score value assigned to the actual value.