An event indicates that an alert may be generated.
Each event has an event ID, which uniquely identifies the event and is referenced in event handlers and other places. For example, a NORAD_DOWN event indicates that the Bradmark Surveillance software on a server is not responding, while a SERVER_DOWN event indicates that the server itself has stopped responding to network ping requests, as well.
Rules generate events, and events trigger actions in event handlers.