A way to group events into incident groups. Aspects include: application failures, connectivity, performance, and security failures.