This application relates to apparatus and methods for identifying anomalies within a time series. In some examples, a computing device receives sales data identifying a sale of at least one item, and aggregates the received data in a database. The computing device may generate a plurality of time series based on the aggregated sales data. The computing device may extract features from the plurality of time series, and generate an alerting algorithm that is based on clusters of the extracted features. The computing device may apply the alerting algorithm to a time series generated from received sales data to determine whether the time series is an anomaly. Based on the determination, the computing device may generate and transmit anomaly data identifying whether the time series is an anomaly, such as to another computing device.