A method and a system for modeling file system operation streams of a computing environment. File system operations of the file system operation streams are workloads produced by the devices of the computing environment. For example, a device of the computing environment produces the workloads, which are requests for information from a storage system of the computing environment. The requests are captured and form traces. The traces are then used as input to a model of the computing environment. The model is iteratively trained by using the traces to learn the dynamic behavior of the computing environment. Specifically, the model is trained to identify sequences of file system operations that are legal. Legal sequences can then be generated in realistic workloads that simulate the workloads produced by the devices of the computing environment to a high degree of probability.