A method, system and apparatus for workload categorization for detecting role changes in a host computing device. A workload characterization system for detecting role changes in a host computing device can include a transaction logging and change detection processor. The processor can be configured to log and detect role changes in the host computing device through an instrumentation monitoring interface to underlying applications supporting a workload based upon a comparison of workload patterns generated from logged transaction executions.