1. A method for implementation by one or more data processors forming part of at least one computing device, the method comprising: counting, in different layers of a computing environment, a number of events occurring during execution of a software application; comparing the number of counted events to a previously generated cluster set to determine that at least one of the counted events is an outlier; and providing data characterizing the at least one of the counted events determined to be an outlier.