Improved systems and techniques for identification and resolution of conditions affecting an information technology system. When an alert is received, it is identified as actionable or non-actionable and, if non-actionable, is subjected to a waiting time before a trouble ticket is created. If the alert has cleared by the time the waiting time expires, an event associated with the alert is discarded and no trouble ticket is created. Non-actionable alerts are identified using a system of predictive rules, with rules being generated according to appropriate criteria, such as the likelihood that an event identified by a rule will be non-actionable, and by the likelihood that an event will be identified by a rule.