1. A tangible article of manufacture excluding propagating signals and storing machine readable instructions for implementing a framework for troubleshooting a virtual private network (VPN) backbone in real-time, the machine readable instructions, when executed, causing a machine to implement: a plurality of event identification modules to receive messages from a corresponding number of monitors in the VPN backbone and identify the received messages as events if a change occurs with a predetermined time window, or if the message is a deviation from a predefined metric, each event identification module having an output; a plurality of event classification modules each having an input coupled to a corresponding event identification module output, each event classification module to classify each identified event depending on the type of change indicated by the event, each event classification module having an output; a temporal correlation module having a plurality of inputs, each input coupled to each event classification module output, the temporal correlation module to perform time-window based and statistical based correlation for the identified and classified events, the temporal correlation module having an output; a spatial correlation module having an input coupled to the temporal correlation module output, the temporal correlation module to filter the correlated events, the spatial correlation module having an output; an impact analysis module having an input coupled to the spatial correlation module output, the impact analysis module to estimate a VPN impact based on an event type and degree, the impact analysis module having an output; and a root cause and mitigation module having an input coupled to the impact analysis module output, the root cause and mitigation module to identify each event's root cause location and failure, determine a mitigation strategy for that event, and output the mitigation strategy.