A system is provided for dynamically identifying and correlating network domain events. The system includes a network domain and a plurality of managed objects in the network domain. A management server is in communication with the managed objects. The management server can receive domain events from at least one of the managed objects. A management module on the management server maintains a topology of managed objects in the network domain. A rule knowledge base is in communication with the management server. The rule knowledge base includes correlation rules for identifying and correlating domain events. A correlation module utilizes a processor to correlate the domain events with the topology using the correlation rules to identify an interaction between the managed objects and the domain events.