Abstract: A computing device to perform incident identification on streamed event data is provided. An event block object is received. The event block object includes a measurement data value generated by a sensor. A plurality of measurement data values and associated time values are extracted for the plurality of event block objects that occur during a time window. A similarity measure is computed between the measurement data values and each of a plurality of reference incident signatures. A best matching reference incident signature is selected from the similarity measures. The similarity measure for the selected best matching reference incident signature is compared to a threshold value. When the selected similarity measure satisfies the threshold value, a type of incident for the extracted measurement data values is identified as a type of incident defined for the selected best matching reference incident signature and is output to an incident information subscribing device.