A method for assisting evaluation of anomalies in a distributed storage system is disclosed. The method includes monitoring at least one system metric of the system and creating a mapping between values and/or patterns of the system metric and one or more services configured to generate logs for the system. The method further includes detecting a potential anomaly in the system based on the monitoring, the potential anomaly being associated with a value and/or a pattern of the monitored system metric. The method also includes using the mapping to identify one or more logs associated with the potential anomaly, displaying a graphical representation of at least a part of monitoring the system metric, the graphical representation indicating the potential anomaly, and providing an overlay over the graphical representation, the overlay comprising an indicator of a number of the logs associated with the potential anomaly.