A system and method for monitoring events includes defining alert events based on primitive event types in an environment monitored by monitoring devices. Alert parameters are set for each alert event, and alert events are combined to create a composite alert event based on a plurality of alert events. A plurality of engines is monitored to determine if multiple events comprising the composite alert event have occurred.