A system to generate medical monitor alarm settings (10) which includes a normative analyzer (36) and/or observational analyzer (48) configured to receive (130) data from logs (32, 34) of a plurality of medical monitors (12), and generate (134, 138) one or more suggested alarm settings (26) based on a constructed model of the received log data.