Application Maintenance Services (AMS) is essential for applications executed on servers to function properly. Its objective is to reduce the application incidents happened and quickly recover services from application failures/issues. The application incidents defined as events when there are some application failures/issues happened are major concerns of AMS, therefore we propose a second order-based anomaly detection method to describe and predict application incidents based on analysis of monitored server traffic metrics. The proposed method first detects anomalies for each metric, second builds the linkage between detected anomalies for all metrics of the server and application incidents, and then predicts potential application incidents. Through the experiments, we find that the presented method provides satisfactory results for identify application incident, which gives more than 90 percentage recall rate while about 65 percentage precision rate.