16. A system for monitoring network traffic in a network: one or more network computers, comprising: a transceiver that communicates over the network; a memory that stores at least instructions; and one or more processors that execute instructions that perform actions, including: instantiating a monitoring engine to perform actions, including: monitoring network traffic associated with a plurality of entities in one or more networks to provide one or more metrics; providing a device relation model based on the plurality of entities, the network traffic, and the one or more metrics; and providing interest information for a user based on one or more properties associated with the user; instantiating an inference engine to perform actions including associating each entity in the plurality of entities with an interest score that is further associated with a level of interest to the user, wherein the level of interest is based on the interest information, the device relation model, and the one or more metrics; and instantiating an alert engine to perform actions, including: generating a plurality of alerts associated with the plurality of entities based on the one or more metrics; and providing one or more alerts to the user from the plurality of alerts based on one or more ranked interest scores associated with one or more entities, and one or more client computers, comprising: a transceiver that communicates over the network; a memory that stores at least instructions; and one or more processors that execute instructions that perform actions, including: providing one or more portions of the network traffic.
16. A system for monitoring network traffic in a network: one or more network computers, comprising: a transceiver that communicates over the network; a memory that stores at least instructions; and one or more processors that execute instructions that perform actions, including: instantiating a monitoring engine to perform actions, including: monitoring network traffic associated with a plurality of entities in one or more networks to provide one or more metrics; providing a device relation model based on the plurality of entities, the network traffic, and the one or more metrics; and providing interest information for a user based on one or more properties associated with the user; instantiating an inference engine to perform actions including associating each entity in the plurality of entities with an interest score that is further associated with a level of interest to the user, wherein the level of interest is based on the interest information, the device relation model, and the one or more metrics; and instantiating an alert engine to perform actions, including: generating a plurality of alerts associated with the plurality of entities based on the one or more metrics; and providing one or more alerts to the user from the plurality of alerts based on one or more ranked interest scores associated with one or more entities, and one or more client computers, comprising: a transceiver that communicates over the network; a memory that stores at least instructions; and one or more processors that execute instructions that perform actions, including: providing one or more portions of the network traffic. 22. The system of claim 16 , wherein the actions of the inference engine further comprise, modifying the interest score that is associated a portion of the plurality of entities based on a distance between entities in the device relation model.