A system and method for determining causation of events across nodes. The invention may include receiving a first event report of a first trace. The first event report may include a first trace identifier. The method may also include assembling a first sub-graph using the first event report; receiving a suspend event report including a message identifier and the first trace identifier; receiving a resume event report including the message identifier and a second trace identifier; and receiving a second event report of the second trace, where the second event report includes the second trace identifier. Additionally, the method may include assembling a second sub-graph using the second event report; and assembling, based on matching the message identifier of the suspend event report and the resume event report, a tracing graph using the first sub-graph and the second sub-graph.