A method for creating or adapting a self-organizing network, SON, configuration rule at a "Big Data" system for a self-organizing radio access network, RAN (100a, 100b or 100c), the "Big Data" system comprising: a data analysis component; a rule creation engine; and an interface to an element management system, the element management system comprising at least a rule translation engine and a rule execution engine and an interface to network elements, the network elements also comprising the interface to the element management system and at least a rule translation engine and a rule execution engine, and the network elements representing a RAN node or function each in the self-organizing RAN, the method comprising the steps of: obtaining, at the data analysis component, data relating to the self-organizing radio access network (100a, 100b, or 100c, 310), the obtained data includes "Big Data" mined from the "Big Data" system relating to the RAN and data received from other data sources; performing, by the data analysis component, analytics on the obtained data to identify occurrence and interdependencies of events and network behaviour; automatically creating, by the rule creation engine, a new SON configuration rule or adapting an existing rule, based on the results of the analytics and converting the rule into a list of event-condition-action parameters by identifying parameters associated with the rule, including: a parameter identifying a triggering event; a parameter defining a condition to be evaluated in the event of the triggering event; and a parameter describing an action to be taken upon the occurrence of a triggering event; providing, by the rule creation engine, the parameters to a rule translation engine of the element management system or to at least one network element for identifying at the rule translation engine which network element or management system can detect the event and relaying the parameters to a rule execution engine of said identified network element or element management system; detecting, by the rule execution engine of the identified network element or element management system, the triggering event; evaluating, by the rule execution engine, the condition, and informing, a configuration engine to perform the action associated with the rule; and in accordance with the rule, performing an action to change a configuration of a network element (130a, 130b or 130c). obtaining, at the data analysis component, data relating to the self-organizing radio access network (100a, 100b, or 100c, 310), the obtained data includes "Big Data" mined from the "Big Data" system relating to the RAN and data received from other data sources; performing, by the data analysis component, analytics on the obtained data to identify occurrence and interdependencies of events and network behaviour; automatically creating, by the rule creation engine, a new SON configuration rule or adapting an existing rule, based on the results of the analytics and converting the rule into a list of event-condition-action parameters by identifying parameters associated with the rule, including: a parameter identifying a triggering event; a parameter defining a condition to be evaluated in the event of the triggering event; and a parameter describing an action to be taken upon the occurrence of a triggering event; providing, by the rule creation engine, the parameters to a rule translation engine of the element management system or to at least one network element for identifying at the rule translation engine which network element or management system can detect the event and relaying the parameters to a rule execution engine of said identified network element or element management system; detecting, by the rule execution engine of the identified network element or element management system, the triggering event; evaluating, by the rule execution engine, the condition, and informing, a configuration engine to perform the action associated with the rule; and in accordance with the rule, performing an action to change a configuration of a network element (130a, 130b or 130c).