A system for automated process performance determination includes an interface and a processor. The interface is configured to receive log data associated with a plurality of tenants. The log data comprises one or more log data types. The processor is configured to aggregate the log data into an aggregated set of log data; and determine a set of metrics based at least in part on the aggregated set of log data. A metric of the set of metrics is associated with a tenant of the plurality of tenants and one of the one or more log data types. The processor is further configured to determine a composite metric for the tenant by combining metrics of the set of metrics associated with the tenant; determine a response based at least in part on the composite metric; and, in the event the response indicates an automated action, perform the automated action.