Concepts and technologies directed to network fault originator identification for virtual network infrastructure are disclosed herein. Embodiments can include a control system that is communicatively coupled with network infrastructure. The control system can include a processor and memory that, upon execution, causes the control system to perform operations. The operations can include determining, based on a source ticket, a network fault condition associated with the network infrastructure. The operations can further include identifying, from the source ticket, a trap set and an alarm set that are associated with origination of the network fault condition. The operations can include the control system collecting network event data from the network infrastructure prior to a polling time of a fault reporting schedule; determining that a qualified source ticket should be created; and generating the qualified source ticket based on the network event data.