The aggregator service associates/correlates a primary event with related events and bundles them together, determines what other related information is needed and builds a work document from the bundled events and the other related information, runs rules to determine the cause of the problem, and controls the life of the work to be done. The aggregator service receives an event from an information bus where the event relates to a state change, identifies primary events and correlates primary events with relates lesser events it receives by applying rules that deal with the understanding or categorization of the problem and binds the events together to produce a work document according to a predetermined organization of work integration. The rules are held in an easily-modifiable form in a rules service and runtime loaded to the aggregator service, thus the rules can be updated or modified at any time by expert problem-solving personnel and not developers.