1. A computer-implemented method comprising: under control of one or more processors configured with executable instructions, retrieving an abstract model of a managed computing system, the abstract model including managed entities having information pages containing encoded methods defining at least one of: installation; monitoring; discovery; or relationships of the managed entities in the managed computing system; discovering a concrete model of the managed computing system based on the encoded methods in the information pages in the abstract model, the concrete model including discovered types of the managed entities and discovered concrete instances of relationships between the managed entities; identifying events associated with the managed entities based on the encoded methods in the information pages in the abstract model; viewing identifier fields of each event of the identified events, each identifier field indicating a relationship of a managed entity of the managed entities to an event of the identified events; comparing the relationships indicated by the identifier fields of the identified events and the relationships discovered in the concrete model, the comparing comprising: determining, based on the encoded methods in the information pages in the abstract model, that the managed entities have a direct relationship or an indirect relationship according to the concrete model; determining that the relationships indicated by the identifier fields of the identified events are associated with the managed entities having the direct relationship or the indirect relationship according in the concrete model; and determining that the identified events are correlated based on the determined direct relationship or the determined indirect relationship according to the concrete model.