Handling alerts in a system to reduce to the number of non-actionable alerts that are provided to an alert handling portion of the system. A method includes receiving an alert. The alert is an unstructured data alert. The method further includes comparing the alert to a plurality of known non-actionable alerts to determine a similarity of the alert to one or more of the known non-actionable alerts. The method further includes dispatching the alert based on the similarity of the alert to one or more of the known non-actionable alerts.