The present invention discloses methods and systems for problem-alert aggregation and identifying sub-optimal behavior. Methods include the steps of: providing data-driven alerts for an asset, wherein the data-driven alerts associate real-world data measured and/or detected from the asset, and wherein entities are physical objects and/or processes; providing an asset representation including interrelations between the objects, processes, and sensors associated with the entities of the asset; associating the data-driven alerts with the respective entities which are interrelated in the asset representation; aggregating the data-driven alerts into events, wherein the events are groupings of related data-driven alerts having related entities according to the asset representation; scoring each event into an event score, wherein the event score represents an event importance, an event urgency, an event relevance, and/or an event significance; and generating a selected subset of the events and respective event scores, wherein the selected subset is based on the event scores.