Certain example embodiments automatically generate complex event processing (CEP) events and query definitions for real-time decomposition of resource usage data. Component models specifying measureable characteristics related to an aggregate reading and state(s) into which respective components are enterable are defined. For components that can have plural states, the models further specify valid state transitions, including predecessor and/or successor states. Plausible and composite state definitions are generatable from the component models. The former defines when a CEP engine is to trigger a corresponding plausible state event to signify that a corresponding state is potentially active. The latter corresponds to a representation of two or more component states that potentially are concurrently active. The CEP engine is configured to trigger events based on the aggregate reading and the generated plausible and composite state event definitions. The CEP engine can establish individualized component states from the aggregate reading based on triggered events.