1. A computer-implemented method comprising: generating an ontology for a business application on an enterprise network, wherein the ontology describes nodes that communicate with each other during an execution of the business application; detecting an alert condition during the execution of the business application; processing the ontology for the business application to determine one or more of a plurality of components of the ontology that are in an alert state, the plurality of components comprising one or more executables associated with the business applications, one or more direct nodes executing the one or more executables and one or more indirect nodes involved in the execution of the business application; generating a root cause view that indicates the one or more alert state components; and displaying the root cause view to a user.