A computer-implemented method for searching for a ticket relevant to a current ticket describing an incident, a system and a computer program product for the same. The method includes extracting a topology of a first application of a server system, the first application being indicated by the current ticket; selecting a second application relevant to the first application from a plurality of candidate applications of the server system, according to the topology; and searching tickets associated with the second application for the ticket relevant to the current ticket.