1. A method, comprising: analyzing, by a machine including a memory and at least one hardware processor, a time series of values associated with a particular type of metric pertaining to a production system; identifying a pattern associated with the time series based on the analysis of the time series, the pattern describing an occurrence of particular values associated with the particular type of metric pertaining to the production system at particular timestamps of the time series; determining a range of potential values associated with the particular type of metric pertaining to the production system, the range of potential values corresponding to a next timestamp in the time series of values, the determining of the range of potential values being based on the pattern associated with the time series; assigning a score value to an actual value associated with the particular type of metric and corresponding to the next timestamp in the time series, the assigning of the score value being based on a comparison of the actual value and the range of potential values; identifying the actual value as a candidate for an alert based on the score value assigned to the actual value; accessing a further value associated with the particular type of metric and corresponding to a further timestamp in the time series; determining that the further value is not a candidate for an alert based on a further score value assigned to the further value as a result of a comparison of the further value and a further range of potential values for the further timestamp; re-analyzing the time series of values including the further value associated with the particular type of metric; and identifying a further pattern associated with the time series based on the re-analyzing of the time series.