Abstract: A method of identifying a contributing cause of an anomaly including receiving a set of timeseries data representing metric values over time, wherein the timeseries data has at least two dimensions, for each of two or more of the timestamps in the set of timeseries data, generating a first and second graph representing (i) the metric values at that timestamp, (ii) the at least two dimensions at that timestamp, and (iii) associations between the metric values at that timestamp, analyzing the first and second graphs associated with each timestamp to identify a particular timestamp including an anomaly, and analyzing the first and second graphs associated with the identified particular timestamp to identify a node that contributed in causing the anomaly.