Abstract: An event management system is monitored for incoming information technology events. Responsive to detecting that the system has received a new event, if the new event is encompassed by any previously created event cluster, the system is instructed to refrain from presenting the new event to a user for handling. If the new event is not encompassed by any previously created event cluster, the system is instructed to present the new event to the user for handling. If the user then performs an ignore or dismiss action in relation to the new event, whether the new event is similar to other events in relation to which the user performed the ignore or dismiss action is determined. If the new event is similar to these other events, a new event cluster against which subsequently received events are compared is created.