1. A method comprising: receiving, by one or more processors, a snapshot of a first event impacting a computer system, where the snapshot includes a first set of values for a plurality of metrics occurring over a first time period corresponding to the first event; extracting, by one or more processors, a first set of feature vectors from the first set of values for the plurality of metrics occurring over the first time period; generating, by one or more processors, a first statistical model representing the first event based, at least in part, on the extracted first set of feature vectors; and determining, by one or more processors, that a second event is similar to the first event by comparing the first statistical model to a second set of values for the plurality of metrics occurring over a second time period corresponding to the second event.