In an example, a first number of events associated with a first event type that are received in the first time window is compared against a first threshold. The first event type is one of a plurality of event types, and each event type corresponds to an amount of resource consumed by an event associated with the event type. It is detected whether events associated with the first event type received in the first time window are part of an event storm based on the first number of events and the first threshold.