1. A system, comprising: a computer readable storage medium that stores software; and a processor that accesses said computer readable storage medium and that executes the software; wherein, when executing the software, the processor abstracts configuration items (CI) in at least a first anomaly and a second anomaly based on type of CI, matches CIs of a common type between the first and second anomalies based on a cost function, and computes a similarity score for the first and second anomalies based, at least in part, on the cost function of the matched CIs and based on topology of the first and second anomalies.