Excessive alerting is reduced by various forms of de-duplication being configurable at the agent, and also by correlating events using configurer-specified keys.
Because correlation occurs at the management server (so as to be able to correlate events from different managed nodes), it does not reduce traffic to the management server.