9. A processor readable non-transitory storage media that includes instructions for monitoring network traffic using one or more network monitoring computers, wherein execution of the instructions by the one or more network computers perform the method comprising: instantiating a monitoring engine to perform actions, including: monitoring network traffic associated with a plurality of entities in one or more networks to provide one or more metrics; providing a device relation model based on the plurality of entities, the network traffic, and the one or more metrics; and providing interest information for a user based on one or more properties associated with the user; instantiating an inference engine to perform actions including associating each entity in the plurality of entities with an interest score that is further associated with a level of interest to the user, wherein the level of interest is based on the interest information, the device relation model, and the one or more metrics; and instantiating an alert engine to perform actions, including: generating a plurality of alerts associated with the plurality of entities based on the one or more metrics; and providing one or more alerts to the user from the plurality of alerts based on one or more ranked interest scores associated with one or more entities.
9. A processor readable non-transitory storage media that includes instructions for monitoring network traffic using one or more network monitoring computers, wherein execution of the instructions by the one or more network computers perform the method comprising: instantiating a monitoring engine to perform actions, including: monitoring network traffic associated with a plurality of entities in one or more networks to provide one or more metrics; providing a device relation model based on the plurality of entities, the network traffic, and the one or more metrics; and providing interest information for a user based on one or more properties associated with the user; instantiating an inference engine to perform actions including associating each entity in the plurality of entities with an interest score that is further associated with a level of interest to the user, wherein the level of interest is based on the interest information, the device relation model, and the one or more metrics; and instantiating an alert engine to perform actions, including: generating a plurality of alerts associated with the plurality of entities based on the one or more metrics; and providing one or more alerts to the user from the plurality of alerts based on one or more ranked interest scores associated with one or more entities. 12. The media of claim 9 , wherein the inference engine performs further actions, comprising: traversing the device relation model based on the interest information; providing one or more other entities based on the traversal; and modifying the interest score that is associated with the one or more other entities based on the traversal.