Embodiments of the present invention provide a method, system and computer program product for the detection of correlation rules in an enterprise computing monitoring and management system. In one embodiment of the invention, a method for detection of correlation rules can be provided. The method can include receiving events from multiple event sources, classifying the events according to a set of event attributes, determining a temporal proximity of occurrence of different classified events, further determining a frequency of occurrence of temporal proximity for particular classified events, and reporting a causal relationship between the particular classified events when the frequency of occurrence exceeds a threshold value.