A method, apparatus, and computer-readable medium are provided for identifying to a user the cause of an event occurring within a computer system. According to one method, a rule is maintained at a computer system that includes one or more conditions and one or more actions that are performed when the conditions are satisfied. An evaluation is periodically performed to determine whether the conditions are satisfied. If the conditions are satisfied, the one or more actions are performed. A request may then be received to identify the cause of the performance of the actions. In response to such a request, the rule is identified, such as by identifying the rule within a user interface provided by the computer system.