The rule may be configured to discard that event if for example the number of dropped packets received is within specified thresholds, or to pass on the event to a user console, or to hold the event and wait for other events which may explain the dropped packets, or to generate a new event 66 if the number of dropped packets exceeds a certain threshold.