1. An apparatus for preventing event flooding in an event processing system, the apparatus comprising: a plurality of processors; a non-transitory computer-readable storage medium (CRSM); and logic, stored on the CRSM and executed on the plurality of processors, for: responsive to receiving, monitored activity data, analysing the monitored activity data, to identify an event value corresponding to an event; responsive to a identifying the event value, identifying a set of threshold values and determining whether the event value has met a first threshold value of the set of threshold values; responsive to determining that the event value has met the first threshold value, determining if the first threshold value is equal a second threshold value met by a previous event; and responsive to determining that first threshold value is equal the second threshold value, disregarding the event.