Learned Response for Alerts

In a method for providing an automatic learned response in a network, a collection system observes user responses to the incoming system indicators and to parameter types and associated parameter values used in the user responses. The collection system creates alert event entries to includes the incoming system indicators, confidence thresholds, the user responses, and the parameter types and associated parameter values used in the user responses. When the collection system receives new system indicators, the collection system determines whether the new system indicators match the system indicators in one or more alert event entries. When the new system indicators match the system indicators in one or more alert event entries and the confidence level exceeds the confidence threshold, the collection system automatically creates a new response based on the user response, the parameter types, and the associated parameter values in the matching alert event entries.