1. A method for correlating events in data processing resources processing a workload, comprising: starting, by one or more processors, a provider side monitoring gateway on a provider side data processing system in a first cloud, wherein the provider side monitoring gateway is located on a provider side of a firewall that separates the provider side from a consumer side of a hybrid cloud, and wherein the provider side monitoring gateway collects provider side monitored data from a provider processing monitoring agent associated with provider data processing resources; starting, by the one or more processors, a consumer side monitoring gateway on a consumer side data processing system in a second cloud, wherein the consumer side monitoring gateway is located on the consumer side of the firewall that separates the provider side from the consumer side of the hybrid cloud, and wherein the consumer side monitoring gateway provides the provider side monitored data from the provider side monitoring gateway to a consumer side monitoring infrastructure within the consumer side data processing system, and wherein the consumer side monitoring gateway collects consumer side monitored data from a consumer processing monitoring agent associated with consumer data processing resources; establishing, by the one or more processors, a secure connection through the firewall between the provider side monitoring gateway associated with the provider data processing resources and the consumer side monitoring gateway associated with the consumer data processing resources, wherein the secure connection through the firewall enables the consumer side monitoring gateway to pull the provider side monitored data corresponding to the provider processing resources from the provider side monitoring gateway and prevents the provider side monitoring gateway to push data through the firewall into the consumer side monitoring gateway to maintain security of the consumer data processing resources; pulling, by the one or more processors, the provider side monitored data from the provider side monitoring gateway into the consumer side monitoring gateway using the secure connection; pushing, by the one or more processors, the provider side monitored data pulled into the consumer side monitoring gateway and the consumer side monitored data to the consumer side monitoring infrastructure; detecting, by the one or more processors, an occurrence of an event that defines a pattern over a specified time period in the provider side monitored data associated with the provider side processing resources in the first cloud and the consumer side monitored data associated with the consumer side processing resources in the second cloud using the consumer side monitoring infrastructure of the consumer side processing resources; sending, by the one or more processors, the event as input to an event correlation and aggregation function that aggregates and correlates received events over periods of time; determining, by the one or more processors, that a series of received events has occurred indicating the consumer side processing resources and the provider side processing resources are in an overload or underutilization condition using the event correlation and aggregation function; responsive to the one or more processors determining that the series of received events has occurred, generating, by the one or more processors, an event based service request to modify a resource configuration of the hybrid cloud using a service desk ticketing function; sending, by the one or more processors, the event based service request to a workload manager that accesses the consumer side processing resources and the provider side processing resources to modify the resource configuration of the hybrid cloud to respond to the overload or underutilization condition; and generating, by the one or more processors, a service fulfillment response to the event based service request using the workload manager and sending the service fulfillment response to the service desk ticketing function.