One example method includes identifying a source of a performance issue in a virtualized environment. Telemetry data is collected relative to the flow of a request/response in the virtualized environment. The collected telemetry data can be compared to normal data. A probability can be generated for each layer to identify which of the layers is the most likely source of the performance issue. The layers can be prioritized based on their probability. The most likely layer or virtual machine is recommended for analysis to determine the cause of the performance issue.