Overlapping event patterns
When a pattern instance is generated based on an event received in the live event stream, a search is performed for any existing pattern instances that contain an event with at least one of the same event type values, and that have matching resources. These are known as overlapping pattern instances. If there are overlapping pattern instances then a hierarchical event group structure is created and displayed in the Event Viewer.