A method of identifying a root cause in a distributed computing environment is provided including collecting metric data of a plurality of application components, collecting metric correlation relationship data, collecting topology relationship data, and collecting transaction tracking relationship data that indicates a group of the application components used to execute a requested transaction. A graph is generated including a plurality of nodes corresponding to the application components by merging the metric correlation relationship data, the topology relationship data, and the transaction tracking relationship data. The nodes of the graph are traversed in an order based on a bi-directional weight for each of a plurality of edges connecting neighboring nodes among the plurality of nodes. A recommendation list is generated including at least one abnormal application component. The recommendation includes an instruction to repair the abnormal application component acting as a system bottleneck in the distributed computing environment.