A wireless access point system includes a processor configured to tap event data and process the event data using a plurality of event filters. Each event filter of the plurality of event filters applies event criteria to detect one or more types of events. The wireless access point system includes a memory configured to store the tapped event data. A communication interface configured to report a report of a detected event type. At least a portion of the report is correlated to analyze a performance of a wireless network.