Event correlation based on pattern recognition and machine learning

A computer implemented method (600) of improving correlation of events and alerts in one or more enterprise networks (103), the method comprising:

• receiving, by a processor (402), event data from a plurality of devices (104) in the network (103), wherein the event data comprises one or more of performance metrics data, alerts data, and incident data;
• cleaning, by the processor (402), the event data based on predetermined input parameters;
• labelling, by the processor (402), the cleaned event data based on predetermined definitions;
• performing, by the processor (402), sequence pattern identification to identify patterns in the labelled event data;
• clustering, by the processor (402), recurring identified patterns to obtain correlated events;
• and
• improving, by the processor (402), the accuracy of the correlated events using reinforcement learning.