An event clustering system includes an extraction engine and a signalizer engine. The extraction engine is in communication with a managed infrastructure. In operation the extraction engine receives messages from the managed infrastructure and produces events that relate to the managed infrastructure. The events are converted into words and subtexts that are used to group the events into clusters relating to failures or errors in the managed infrastructure physical hardware. The managed infrastructure supports the flow and processing of information. The signalizer engine determines one or more common characteristics of events and produces clusters of events relating to the failure or errors in the managed infrastructure. Membership in a cluster indicates a common factor of the events that is a failure or an actionable problem in the physical hardware of the managed infrastructure directed to supporting the flow and processing of information. In response to production of the clusters of events one or more physical changes in a managed infrastructure hardware is made.