Dynamic monitoring and problem resolution

A computer program product comprising:

• a computer readable storage medium and program instructions stored on the computer readable storage medium, the program instructions comprising:
• program instructions to monitor an IT environment for a first symptom, wherein the IT environment comprises a plurality of components, and wherein the first symptom is based on a first measurement of an attribute of a first component of the plurality of components, and wherein the first symptom is a malfunction of the at least one component;
• in response to determining the first measurement deviates from a reference value, program instructions to determine the first component is a cause of the first symptom based, at least in part, on the first measurement;
• in response to determining a monitoring tier of the cause component is activated, program instructions to determine a plurality of measurements for the plurality of components;
• program instructions to identify a component of the plurality of components with the greatest number of activated monitoring tiers, based on the plurality of measurements;
• program instructions to determine whether the component with the greatest number of activated monitoring tiers is the cause component;
• program instructions to collect probe data for the plurality of components;
• program instructions to determine a probe ripple, wherein the probe ripple comprises one or more affected components of the plurality of components, wherein the one or more affected components are affected by the malfunction;
• and
• program instructions to report a root cause of the first symptom based, at least in part, on the probe data and the probe ripple.

A computer system comprising:

• one or more computer processors;
• one or more computer readable storage media;
• program instructions stored on the computer readable storage media for execution by at least one of the one or more processors, the program instructions comprising:
• program instructions to monitor an IT environment for a first symptom, wherein the IT environment comprises a plurality of components, and wherein the first symptom is based on a first measurement of an attribute of a first component of the plurality of components, and wherein the first symptom is a malfunction of the at least one component;
• in response to determining the first measurement deviates from a reference value, program instructions to determine the first component is a cause of the first symptom based, at least in part, on the first measurement;
• in response to determining a monitoring tier of the cause component is activated, program instructions to determine a plurality of measurements for the plurality of components;
• program instructions to identify a component of the plurality of components with the greatest number of activated monitoring tiers, based on the plurality of measurements;
• program instructions to determine whether the component with the greatest number of activated monitoring tiers is the cause component;
• program instructions to collect probe data for the plurality of components;
• program instructions to determine a probe ripple, wherein the probe ripple comprises one or more affected components of the plurality of components, wherein the one or more affected components are affected by the malfunction;
• and
• program instructions to report a root cause of the first symptom based, at least in part, on the probe data and the probe ripple.