The increasing complexity of today's production systems and the variety of model-based approaches to their monitoring, diagnosis and testing emphasize the importance of the modeling step. Modeling is mostly done manually, in a costly and time-consuming way. In this paper, an alternative that comes from the learning theory is given: an automated procedure for identifying behavior models from recorded observations. Assuming the system's structure is known, the algorithm presented here is capable of learning behavior models for its components. The algorithm accounts for probabilistic, timing, discrete and continuous aspects of the given system, using the modeling formalism of hybrid automata. The practical usability of identified models is demonstrated using an anomaly detection application for a real production system.