1. A method for automated detection of a real IT system problem, the method comprising: obtaining monitor measurements of metrics associated with activities of a plurality of configuration items of the IT system; detecting anomalies in the monitor measurements; grouping concurrent anomalies of the detected anomalies corresponding to configuration items of the plurality of configuration items which are topologically linked to be regarded as a system anomaly; calculating a significance score for the system anomaly; and determining that the system anomaly relates to a real system problem based on the calculated significance score.