1. A computer-implemented method, comprising: receiving user input, the user input identifying one or more rules, each of the one or more rules relating one or more computer system symptoms to one or more computer system conditions; receiving feedback data from a plurality of client agents running on a plurality of client computer systems, the feedback data including data indicating presence of the one or more symptoms in the client computer systems for each of the one or more rules and indicating presence of the one or more conditions in the client computer systems for each of the one or more rules; analyzing the feedback data to produce correlation information for each of the one or more rules, the correlation information quantifying a degree of correlation between presence of the one or more symptoms and presence of the one or more conditions related by each of the one or more rules, the one or more rules comprising a set of one or more correlation mappings; generating computer support information derived from at least one of the one or more rules; transmitting one or more mapping representations to a set of monitored computer systems, the one or more mapping representations including instructions that, when executed in the set of monitored computer systems, apply the set of one or more correlation mappings to the set of monitored computer systems; receiving an alert if one of the mappings is met in a monitored computer system in the set of monitored computer systems; refining the set of correlation mappings, the refinement being based on analysis of additional feedback data received from the set of monitored computer systems; and altering types of feedback data collected from the plurality of client agents, the alteration being based on the correlation information.