Filtering rules for incoming messages can be dynamically generated by a message management service based on patterns in the user's behavior. The message management service can analyze event records associating user actions with features of messages to detect correlations between message features and resulting actions, including correlations across multiple messaging accounts belonging to the same user. Based on correlations, the message management service can provide a suggested rule to the user's client device, and the user can accept or decline the suggestion.