This invention relates in general to classification and analysis of events within a computer or computer network, and in particular to methods and systems for performing preliminary cause-based classification of events to facilitate cause-based analysis.