Disclosed herein are system, method, and computer program product embodiments for providing a distributed alert system using actor models. The approach includes initializing an alert actor configured to run an alert action. A datapoint related to the alert action is received, and can then be processed at the alert actor against a current status of an alert (such as a running average of prior datapoints) in order to determine a new status of the alert. This allows for a notification to be provided, such as to a system administrator, based on a change in status if needed.