A method is used in detecting slow storage device operations in a storage system. Information regarding a set of storage device operations performed on a storage device in the storage system is monitored in real time. The information is analyzed in real time. A determination is made from the analysis whether the storage device can be identified as a slow storage device. At least one action is performed on the storage system, while the storage system continues to operate, to isolate the slow storage device.