Abstract: Embodiments of the innovation relate to a host device having a memory and a processor, the host device configured to determine an anomaly associated with an attribute of a computer environment resource of the computer infrastructure. The host device is configured to correlate an object associated with the attribute of the detected anomaly with a related object of the computer infrastructure. The host device is configured to determine a root cause probability for each object of the correlated objects, the root cause probability identifying a probability of the correlated object functioning as a cause of the detected anomaly. The host device is configured to output an identification of a root object associated with the anomaly based upon the identified root cause probability.