1. An event clustering system configured to provide extracted information, comprising: an extraction engine in communication with an infrastructure, the extraction engine in operation receiving data from the infrastructure and produces clustering events; an alert engine that receives the events and creates alerts mapped into a matrix, M; a sigalizer engine that includes one or more of an NMF engine, a k-means clustering engine and a topology proximity engine, the sigalizer engine determining one or more common steps from events and produces clusters relating to the alerts and or events; and a data extraction device that is configured to collect information from one or more clusters.