1. A method executed on processor in a management server in a network for deploying monitoring agents in the network, comprising: deploying a first agent to monitor a first application component of an application, wherein the first agent is operable to monitor a communication associated with the first application component, wherein the communication is outbound from the first application component to an unknown second application component of the application; determining if the communication is associated with the unknown second application component of the application where the unknown second application component is not monitored, including analyzing the communication to determine if the communication comprises a correlator; determining an identifier for a type of the unknown second application component and a location for the unknown second application component based on the communication, wherein the type of the unknown second application component is determined by analyzing a protocol of the communication; if the communication is associated with the unknown second application component, deploying a second agent over the network to monitor the unknown second application component, wherein the second agent is selected based on the identifier and the location of the unknown second application component; and assembling a deployment candidate list comprising the identifier for the type of the unknown second application component and the location of the unknown second application component.