12. The method of claim 8 wherein: receiving the operational data from the analyzed computing system includes receiving event logs from the analyzed computing system operating under normal conditions; and identifying the operational pattern includes: parsing the event logs based on keywords; identifying a temporal sequence of events based on the parsed event logs; and identifying a time interval between a pair of the events of the temporal sequence.
8. A method of diagnosing computing system performance, comprising: receiving operational data from an analyzed computing system; identifying an operational pattern based on the operational data from the analyzed computing system, the operational pattern including a temporal sequence of operations, events, or system states related to the analyzed computing system; receiving an annotation and associating the received annotation with the identified operational pattern, the annotation identifying a reason, a cause, or a corrective suggestion corresponding to a violation of the temporal sequence; and providing, to a diagnostic system, the operational pattern with the associated annotation for diagnosing performance of the analyzed computing system; receiving additional operational data from a monitored computing system; and in response to identifying, in the additional operational data received from the monitored computing system, the violation of the temporal sequence, providing, by the diagnostic system, data representing the annotation identifying a reason, a cause, or a corrective suggestion corresponding to the violation of the temporal sequence.