1. A method executed by a computing device, comprising: calculating respective normalized first metric values for each of a plurality of first metric values that are on a time scale and respective normalized second metric values for each of a plurality of second metric values that are on the time scale, wherein the plurality of first metric values are associated with a first metric, and the plurality of second metric values are associated with a second metric; identifying an extremum of the normalized first metric value and the normalized second metric value at each time of the time scale to determine a plurality of extremum baseline values; determining a plurality of sleeve values of the plurality of extremum baseline values; identifying an anomaly in a computing system based on the plurality of extremum baseline values and the plurality of sleeve values; and in response to the identifying of the anomaly, performing an automated remedial action to address the anomaly in the computing system.