1. A method comprising: accessing a fingerprint comprising a set of rules that describe the behavior of at least one metric of an information technology (IT) infrastructure, wherein at least one rule of the fingerprint describes the probability of a symptom for a specific time cut that corresponds to a number of time units prior to an occurrence of a problem, wherein the fingerprint is produced as a result of the problem in the IT infrastructure being identified, information related to the problem in the IT infrastructure being collected, and the set of rules being formed from the collected information; comparing the fingerprint to an incoming data stream; and preemptively predicting a potential problem in the IT infrastructure based on the fingerprint comparison; wherein at least one of the accessing, the comparing and the preemptively predicting is executed by a processor.