1. A computer-implemented method comprising: defining a topology of resources, the topology of resources representing relationships amongst the resources, each resource comprising at least one resource attribute described in a data model identifying attributes of each resource; acquiring event data describing an event that occurred amongst the resources, the event data comprising a format incompatible with the data model and failing to clearly identify any of the resources with which the event data is associated; correlating the event data in the format incompatible with the data model with the data model in order to determine a locus of the event data within the topology of resources; and associating the event data according to the locus of the event data with a suggested resource where the event most likely occurred.