Event processing will play an increasingly important role in constructing distributed applications that can immediately react to critical events. In this paper we describe the CEDR language for expressing complex event queries that filter and correlate events to match specific patterns, and transform the relevant events into new composite events for the use of monitoring applications. Stream-based execution of these standing queries offers instant insight for users to see what is occurring in their systems and to take time-critical actions.