1. A method comprising: receiving an event related to a plurality of computing processes that are running in a plurality of clouds and a user-defined action to perform upon an occurrence of the event, wherein the event comprises exceeding a threshold number of additional computing processes spawned by the plurality of computing processes; monitoring the plurality of computing processes that are running in the plurality of clouds for the occurrence of the event; determining a number of additional computing processes spawned by the plurality of computing processes exceeds the threshold number; and performing, by a processor, the user-defined action in view of the determining, wherein the user-defined action comprises terminating execution of the plurality of computing processes and the additional computing processes.