1. A method for clustering events, comprising: receiving data at an extraction engine from managed infrastructure that includes managed infrastructure physical hardware which supports the flow and processing of information; producing events that relate to the physical hardware of the managed infrastructure; converting the events into words and subsets used to group the events into clusters that relate to alerts and events indicative of failures or errors in the managed infrastructure; converting the data into the alerts; mapping on a display computer system the alerts into a matrix M, factoring the matrix M into A and B, where A is inspected and significant dusters are extracted, and B is used to assign a start and end time to each duster; determining one or more common steps from the events and producing clusters relating to at least one of the alerts and events and producing dusters of events relating to the failure or errors in the managed infrastructure, where membership in a duster indicates a common factor of the events that is a failure or an actionable problem in the physical hardware of the managed infrastructure directed to supporting the flow and processing of information; using a source address for each event to assign a graph coordinate to the event with a subset of attributes being extracted for each event and turning that into a vector; in response to production of the clusters making one or more physical changes in the managed infrastructure hardware to modify a component in the managed infrastructure physical hardware indicated with a failure or error.