This is very interesting but does raise the question of how to adequately define patterns. One would have to have a working understanding of the type of events

This is very interesting but does raise the question of how to adequately define patterns. One would have to have a working understanding of the type of events that need alerts, and how they look on a sensor, as well as what type of false alarm could look the same. But it is a definite step up from threshold-based alerting, which is hugely susceptible to false alarms.