According to an aspect of the present disclosure, a correlation data correlating resource usage with workload signatures is maintained, each workload signature representing a cluster of block signatures, each block signature characterizing the transaction instances initiated in a corresponding block duration. For the transactions received in a current block duration, if a current block signature is not contained in the correlation data and if the current transaction arrival rate (TAR) is greater than an expected TAR, a resource requirement for the current block signature is computed. Actions to manage capacity to handle transaction instances are triggered if the resource requirement is greater than the resource allocation in the current block duration. As an unknown current block signature and a higher TAR may be indicative of a workload surge, triggering suitable actions for such block signatures facilitates such surges to be handled by the software application.