A health model builder may construct a health model from instrumentation of software. To do so, the instrumentation of the software component may be mapped to states of operation of the software component and the instrumentation may be grouped together. A health model may be built with the states of operation resulting from mapping the instrumentation to states of operation of the software component and with transitions between the states of the health model that represent an occurrence of instrumentation in an instrumentation group. The system allows for identification of anti-alert instrumentation to be added where instrumentation is missing for reporting recovery from failure. Moreover, a blame component may be identified for any instrumentation of a software component that indicates it failed because of another software component.