1. A computer-executed method for identifying an undesirable feature in a network of computing nodes, comprising: detecting an anomaly associated with a node in the network, wherein the anomaly includes an abnormal state or configuration of the node; identifying one or more features which are associated with the anomaly; updating the identified features; sending a comment-soliciting request to at least one other node in the network, wherein the comment-soliciting request specifies the anomaly and the updated features; receiving, from at least one other node in the network, information indicating whether the at least one other node experienced a correlation between a first feature of the updated features and the anomaly; correlating the first feature with the anomaly based on the received information; and producing a result which indicates a correlation between the first feature and the anomaly.