1. A method for software system performance diagnosis with kernel event feature guidance, comprising the steps of: receiving input information for low level kernel events from a training execution of the software system and a production system monitoring for an anomaly; processing the input information in a trace generation providing a first set of transaction traces from a normal training scenario and a second set of traces generated from the same system in the production scenario; determining by an anomaly trace localization procedure whether there exists an anomaly by comparing information from the first and second set of traces in a global scope; applying a fine grained anomaly check by an anomaly event localization procedure responsive to an anomaly determined by the preceding anomaly trace localization procedure; and obtaining an anomaly status from the determining or applying steps.