A method and system for grouping events is provided in which a plurality of base groups (303) each define a set of event points. Combined groups (304) have a set of event points defined by the combination of the event points in combining groups. The combination may be by a union of groups or an exclusion of groups and may combine base groups (303) and/or combined groups (304) together. The method and system activate or deactivate groups to enable or disable the generation of events defined by the event points in a group. The generation of events may record event instances (306) of the event points for analysis, to provide an alert for an event instance of predetermined value, to trigger a further event or activity, or to publish the event instances for the event points.