1. An enterprise computing monitoring and management data processing system comprising: a hierarchy of nodes, each of a plurality of the nodes being coupled to a corresponding embedded correlation engine and an event bus; a root node among the nodes, the root node being coupled to the event bus and to cross-cutting correlation logic, the cross-cutting correlation logic comprising program code enabled to identify a high frequency of events from a particular event source among the nodes and to move a corresponding correlation rule to an embedded correlation engine closer to the particular event source.