1. A match network module comprising: an evaluation graph sub-module configured to control one or more processing threads that match rules to patterns; a thread pool sub-module configured to store the one or more processing threads; a rule maintenance sub-module configured to build, delete, and/or modify event correlation rules; a match store sub-module configured to maintain the components of an event correlation rule path in the evaluation graph sub-module; a configuration handler sub-module configured to receive instructions for adding, deleting, and/or modifying event correlation rules; and an action suggestions sub-module configured to create suggestions for handling event correlation rules based on inputs received from the evaluation graph sub-module.