A method performed by a switch in a software-defined network (SDN), the switch being communicatively coupled to a controller, is provided. The method includes performing a first flow action with respect to a first flow (e.g., deleting the first flow). The method further includes storing a first flow event data object, the first flow event data object indicating the first flow and the first flow action. The method further includes storing a first tag in association with the flow event data object. The method further includes generating a flow event message comprising the first flow event data object and the first tag. The method further includes sending the flow event message to the controller.