A method and system for grouping events is provided in which a plurality of base groups (**303**) each define a set of event points. Combined groups (**304**) have a set of event points defined by the combination of the event points in combining groups. The combination may be by a union of groups or an exclusion of groups and may combine base groups (**303**) and/or combined groups (**304**) together. The method and system activate or deactivate groups to enable or disable the generation of events defined by the event points in a group. The generation of events may record event instances (**306**) of the event points for analysis, to provide an alert for an event instance of predetermined value, to trigger a further event or activity, or to publish the event instances for the event points.