Management of events in event management systems

An apparatus comprising:

• an event learning system comprising a processor and memory, wherein the processor is configured to:
• receive a plurality of events from an event source, each event comprising event data relating to a monitored system associated with the event source;
• identify a set of data fields in the event data of the plurality of events;
• determine one or more relationships between at least one data field in the set of data fields and at least one other data field in the set of data fields, and
• determine a mapping of the event data of the plurality of events to a predefined common format, based on the determined one or more relationships.

A computer program product comprising a computer readable storage medium having program instructions embodied therewith, wherein the program instructions are executable by a processor to cause the processor to:

• receive a plurality of events from an event source, each event comprising event data relating to a monitored system associated with the event source;
• identify a set of data fields in the event data of the plurality of events;
• determine one or more relationships between at least one data field in the set of data fields and at least one other data field in the set of data fields, and
• determine a mapping of the event data of the plurality of events to a predefined common format, based on the determined one or more relationships.