A framework to handle monitoring and automatic fault manifestation in cloud networks. Multiple techniques correlate the logs of different cloud services or generate independent capsules for each component, VM, storage, or transaction. In a first exemplary technique, an authentication token is provided by an authentication service for logs during a period of an event. In a second exemplary technique, a unique instance ID for multiple distinct processes may be created in a data model of notification logs or service logs.