Problem isolation in a virtual environment is described. In one example, a method is disclosed which includes maintaining a topology of network devices in a virtual environment in a performance management database hosted on a problem isolation server. The network devices can be monitored for metrics breaching a baseline. A snapshot of portions of the topology associated with the metrics breaching the baseline can be captured using a snapshot module. The snapshot captured can include a partial topology. Time stamps associated with the metrics can be maintained. The time stamps can include time stamps for when the metrics breach the baseline. The time stamps can be correlated with the snapshot to form a problem isolation timeline.