A learner object that incorporates indications of agreements and disagreements with determinations obtained from a clustering engine of adding incoming events to one or more events groups is generated. An event is received based on monitored conditions. A determination is made not to add the event to an events group based on a first similarity score obtained from the clustering engine between the event and the events group not exceeding a threshold value. In response to determining not to add the event to the events group, a determination to add the event to the events group is obtained based on the learner object. In response to the determination obtained based on the learner object, the event is added with to the events group. A user interface configured to visually display and obtain feedback regarding additions of events to the events groups based on determinations of the clustering engine is generated.