A monitoring system is provided. The monitoring system comprises a first storage queue containing rules ready for processing, an event storage containing events, and a plurality of first processor threads configured to execute any one of the rules contained in the first storage queue based on the contents of the event storage. The system also comprises a rules processor configured to receive a plurality of events from a plurality of monitored locations, to add the event to the event storage, to remove a first rule from the first storage queue, to provide the first rule to one of the first processor threads for executing, to receive a first result from the one of the first processor threads, and to send a first notification based on the first result.