A system. method and program product that utilizes running profiles and trend groups to analyze streams of event data in real time. A system is provided having a group profile processing system for generating a running group profile from a plurality of data event values, wherein each of the plurality of data event values is obtained from an associated one of the plurality of data streams; an event normalization system for normalizing each of the plurality of data event values based on the running group profile to generate a normalized data event value for the data event values obtained from each of the plurality of data streams; an event profile processing system for generating a running event profile for each normalized data event value; and an analysis system that evaluates each data stream by comparing a normalized data event value with an associated running event profile.