Embodiments monitor for faults in a cloud based network for a plurality of features comprising an application and dependent features. Embodiments generate a graphical representation of the plurality of features comprising a plurality of nodes and corresponding relationships between the nodes, each node corresponding to one of the plurality of features. Embodiments monitor for events for the plurality of features, the events corresponding to one or more of the nodes, to generate monitored events. Embodiments populate a graph database with the monitored events and classify each of the nodes with a trained graph neural network (“GNN”), the classification comprising a prediction of a failure of at least one node. Based on the classifying, for a failure node corresponding to the prediction, embodiments generate a new alert for the failure node or revise a threshold for an existing alert for the failure node.