An embodiment for root cause analysis of computerized system anomalies is provided. The embodiment may include monitoring key performance indicators (KPIs) for a computerized system, wherein KPI values of the monitored KPIs form respective timeseries. The embodiment may include detecting an anomaly in the computerized system based on the monitored KPIs. The embodiment may include determining a troubleshooting time window extending over a given time period. The embodiment may include identifying a strict subset of the monitored KPIs based on portions of the respective timeseries spanning the given time period. The strict subset comprises abnormal KPIs (aKPIs) and potential explanatory KPIs (xKPIs). The embodiment may include obtaining a causal graph of vertices mapping KPIs of the strict subset by running a causality algorithm to evaluate weights of directed edges connecting the vertices and accordingly obtain one or more directed paths. The embodiment may include returning the obtained causal graph.