1. A system for matching a system event to a rule comprising: a computer-readable data structure comprising a plurality of system event rules organizable as a partially ordered set; a processor configured to analyze the computer-readable data structure to determine whether an event matches a description set of at least one rule from the plurality of system event rules.