Method and system for processing security event data

1. A method, comprising:

accessing, in storage external to a premises, first data indicative of an alarm event associated with the premises and second data indicative of a non-alarm event associated with the premises;

determining, by a computing device external to the premises and based on a notification rule stored external to the premises, to send a notification comprising one or more of the first data or the second data, wherein the notification rule is based on user input received via a user interface of a user device associated with the premises; and

sending the notification.

2. The method of claim 1 , further comprise receiving, via at least one of a device located at the premises or a server device, data indicative of the notification rule.

3. The method of claim 1 , wherein the storage external to the premises comprises an event database comprising a first record comprising the first data indicative of the alarm event and a second record comprising the second data indicative of the non-alarm event.

4. The method of claim 1 , wherein the storage external to the premises comprises at least one of: an identifier of a premises device located at the premises that determined the alarm event, or an indication of a time associated with the alarm event.

5. The method of claim 1 , further comprising causing storage, in the storage external to the premises, of an indication of sending the notification.

6. The method of claim 1 , wherein determining to send the notification comprises determining that an occurrence of both the non-alarm event and the alarm event within a time period is associated with sending the notification.

7. The method of claim 1 , wherein the non-alarm event comprises at least one of a time delay event, a loss of communication event, a restoration of communication event, a disarming event, or an arming event.

8. The method of claim 1 , wherein the computing device comprises one or more of a server device, a security server, or a central monitoring station.

9. The method of claim 1 , wherein sending the notification comprises sending the notification to at least one of the user device associated with the premises or a device associated with a central monitoring station.

10. A device comprising:

one or more processors; and

memory storing instructions that, when executed by the one or more processors, cause the device to:

access, in storage external to a premises, first data indicative of an alarm event associated with the premises and second data indicative of a non-alarm event associated with the premises;

determine, external to the premises and based on a notification rule stored external to the premises, to send a notification comprising one or more of the first data or the second data, wherein the notification rule is based on user input received via a user interface of a user device associated with the premises; and

send the notification.

11. The device of claim 10 , wherein the instructions, when executed by the one or more processors, further cause the device to receive, via at least one of a device located at the premises or a server device, data indicative of the notification rule.

12. The device of claim 10 , wherein the storage external to the premises comprises an event database comprising a first record comprising the first data indicative of the alarm event and a second record comprising the second data indicative of the non-alarm event.

13. The device of claim 10 , wherein the storage external to the premises comprises at least one of: an identifier of a premises device located at the premises that determined the alarm event, or an indication of a time associated with the alarm event.

14. The device of claim 10 , wherein the instructions, when executed by the one or more processors, further cause the device to cause storage, in the storage external to the premises, of an indication of sending the notification.

15. The device of claim 10 , wherein the instructions that, when executed by the one or more processors, cause the device to determine to send the notification comprises instructions that, when executed by the one or more processors, cause the device to determine that an occurrence of both the non-alarm event and the alarm event within a time period is associated with sending the notification.

16. The device of claim 10 , wherein the non-alarm event comprises at least one of a time delay event, a loss of communication event, a restoration of communication event, a disarming event, or an arming event.

17. The device of claim 10 , wherein the device comprises one or more of a server device, a security server, or a central monitoring station.

18. The device of claim 10 , wherein the instructions that, when executed by the one or more processors, cause the device to send the notification comprises instructions that, when executed by the one or more processors, cause the device to send the notification to at least one of the user device associated with the premises or a device associated with a central monitoring station.

19. A non-transitory computer-readable medium storing computer-executable instructions that, when executed, cause:

accessing, in storage external to a premises, first data indicative of an alarm event associated with the premises and second data indicative of a non-alarm event associated with the premises;

determining, by a computing device external to the premises and based on a notification rule stored external to the premises, to send a notification comprising one or more of the first data or the second data, wherein the notification rule is based on user input received via a user interface of a user device associated with the premises; and

sending the notification.

20. The non-transitory computer-readable medium of claim 19 , further comprise receiving, via at least one of a device located at the premises or a server device, data indicative of the notification rule.

21. The non-transitory computer-readable medium of claim 19 , wherein the storage external to the premises comprises an event database comprising a first record comprising the first data indicative of the alarm event and a second record comprising the second data indicative of the non-alarm event.

22. The non-transitory computer-readable medium of claim 19 , wherein the storage external to the premises comprises at least one of: an identifier of a premises device located at the premises that determined the alarm event, or an indication of a time associated with the alarm event.

23. The non-transitory computer-readable medium of claim 19 , wherein the instructions, when executed, further cause storage, in the storage external to the premises, of an indication of sending the notification.

24. The non-transitory computer-readable medium of claim 19 , wherein determining to send the notification comprises determining that an occurrence of both the non-alarm event and the alarm event within a time period is associated with sending the notification.

25. The non-transitory computer-readable medium of claim 19 , wherein the non-alarm event comprises at least one of a time delay event, a loss of communication event, a restoration of communication event, a disarming event, or an arming event.

26. The non-transitory computer-readable medium of claim 19 , wherein the computing device comprises one or more of a server device, a security server, or a central monitoring station.

27. The non-transitory computer-readable medium of claim 19 , wherein sending the notification comprises sending the notification to at least one of the user device associated with the premises or a device associated with a central monitoring station.

28. A system comprising:

a storage device comprising storage located external to a premises; and

a computing device located external to the premises and configured to:

access, in the storage and via the storage device, first data indicative of an alarm event associated with the premises and second data indicative of a non-alarm event associated with the premises;

determine, based on a notification rule stored external to the premises, to send a notification comprising one or more of the first data or the second data, wherein the notification rule is based on user input received via a user interface of a user device associated with the premises; and

send the notification.

29. The system of claim 28 , wherein the computing device is configured to receive, via at least one of a device located at the premises or a server device, data indicative of the notification rule.

30. The system of claim 28 , wherein the storage comprises an event database comprising a first record comprising the first data indicative of the alarm event and a second record comprising the second data indicative of the non-alarm event.

31. The system of claim 28 , wherein the storage comprises at least one of: an identifier of a premises device located at the premises that determined the alarm event, or an indication of a time associated with the alarm event.

32. The system of claim 28 , wherein the computing device is configured to cause storage, in the storage external to the premises, of an indication of sending the notification.

33. The system of claim 28 , wherein the computing device is configured to determine to send the notification by determining that an occurrence of both the non-alarm event and the alarm event within a time period is associated with sending the notification.

34. The system of claim 28 , wherein the non-alarm event comprises at least one of a time delay event, a loss of communication event, a restoration of communication event, a disarming event, or an arming event.

35. The system of claim 28 , wherein the computing device comprises one or more of a server device, a security server, or a central monitoring station.

36. The system of claim 28 , wherein the computing device is configured to send the notification by sending the notification to at least one of the user device associated with the premises or a device associated with a central monitoring station.