Managing event group definitions in service monitoring systems

This invention describes a system that automatically organizes alerts from computer networks to help predict and prevent problems. It works by identifying existing categories of related events, some based on past issues and others currently active. If a new alert doesn't fit into any of the active categories, the system automatically creates a new category for it based on the alert's details.