1. A method for use in monitoring one or more platforms of one or more data systems, comprising: receiving, at a processor, structured data generated by one or more platforms over at least one communications network; and analyzing, at the processor using a first rule block, at least some of the data, wherein the analyzing includes: identifying, at the processor, a first portion of the structured data; obtaining reference data that is at least partially derived from the structured data, wherein the obtaining reference data comprises: accessing, by the processor, a linking relationship object in the first rule block to identify a data field in the structured data; extracting, by the processor, a content of the data field from the structured data: identifying facts based upon their relation to the content; and generating reference data from the facts; evaluating, using at least a first expression, the first portion of the structured data in view of the reference data to determine whether a result is one of at least first and second outcomes; and evaluating the result to determine an event of interest.