The system determines data which indicate memory usage by a process and information related to a number of instances of the process. The system determines for the process: a first average amount of memory; a first standard deviation; a first value indicating a difference between a current amount of memory used by the process and the first average amount; a second average number of process instances; a second standard deviation; and a second value indicating a difference between a current number of process instances and the second average number. The system performs a corrective action to address a memory spike associated with the process responsive to comparing at least one of: the current amount of memory used by the process with a watermark; the first value with the first standard deviation scaled; the current number of instances with a watermark; and the second value with the second standard deviation scaled.