1. A computer-implemented method, comprising: employing at least one processor configured to execute computer-executable instructions stored in memory to perform the following acts: receiving an event stream, wherein each event in the stream comprises an attribute and value of the attribute; identifying one or more unique values of the attribute from the event stream, wherein the one or more unique values are non-duplicative; determining a count of the unique values; assigning the attribute to one of a plurality of categories based on variance in the count and one or more past counts of unique values; and presenting, on a display, the attribute based on the one of the plurality of categories assigned.