2. A computer-implemented method for collecting event information, comprising: on a server system having one or more processors for executing one or more programs stored in memory of the server system so as to perform the method: loading a plurality of XML documents, each XML document specifying event parsing logic for a respective group of related events; storing in one or more parsing trees a representation of the event parsing logic in the plurality of XML documents, the one or more parsing trees including event parsing logic for parsing events in a plurality of groups of events; receiving events, including a first event and a second event; processing the second event in accordance the event parsing logic for a first group of events that includes both the first event and second event, the processing of the second event including: extracting information from the first event in accordance with the event parsing logic for the first group of events; extracting information from the second event in accordance with the event parsing logic for the first group of events; supplementing at least a portion of the information extracted from the second event with at least a portion of the information extracted from the first event, in accordance with the event parsing logic for the first group of events, to produce enhanced information for the second event; and storing the enhanced information for the second event in computer readable memory.
2. A computer-implemented method for collecting event information, comprising: on a server system having one or more processors for executing one or more programs stored in memory of the server system so as to perform the method: loading a plurality of XML documents, each XML document specifying event parsing logic for a respective group of related events; storing in one or more parsing trees a representation of the event parsing logic in the plurality of XML documents, the one or more parsing trees including event parsing logic for parsing events in a plurality of groups of events; receiving events, including a first event and a second event; processing the second event in accordance the event parsing logic for a first group of events that includes both the first event and second event, the processing of the second event including: extracting information from the first event in accordance with the event parsing logic for the first group of events; extracting information from the second event in accordance with the event parsing logic for the first group of events; supplementing at least a portion of the information extracted from the second event with at least a portion of the information extracted from the first event, in accordance with the event parsing logic for the first group of events, to produce enhanced information for the second event; and storing the enhanced information for the second event in computer readable memory. 14. The method of claim 2 , wherein the events contain network traffic information.