Generating metadata for events based on parsed location information of data chunks of an isolated execution environment

A computing system, comprising:

• memory;
• and
• one or more first processing devices coupled to the memory and configured to:
• obtain a chunk of data from a data store in a hosted computing environment, the hosted computing environment comprising:
• a host computing device, the host computing device including the data store,
• a plurality of isolated execution environments instantiated on the host computing device, wherein the plurality of isolated execution environments share compute resources of the host computing device, and wherein each isolated execution environment of the plurality of isolated execution environments is isolated from other isolated execution environments of the plurality of isolated execution environments, and
• an isolated execution environment manager executing on host computing device, wherein the isolated execution environment manager is communicatively coupled with the plurality of isolated execution environments and is configured to manage compute resource allocation of the host computing device;
• obtain location information of the chunk of data, wherein the location information includes a storage location of the chunk of data in the host computing device;
• parse the location information to determine an identity of a plurality of components of the hosted computing environment associated with the chunk of data, the plurality of components includes a particular isolated execution environment of the plurality of isolated execution environments that generated a first portion of the chunk of data, wherein the isolated execution environment manager generates a second portion of the chunk of data;
• generate metadata using the determined identity of the plurality of components;
• generate, at a data intake and query system, an event based on the chunk of data, wherein the event includes the first portion of the chunk of data;
• and
• associate the metadata with the event.

Non-transitory computer readable media comprising computer-executable instructions that, when executed by a computing system of a data intake and query system, cause the computing system to:

• obtain a chunk of data from a data store in a hosted computing environment, the hosted computing environment comprising:
• a host computing device, the host computing device including the data store,
• a plurality of isolated execution environments instantiated on the host computing device, wherein the plurality of isolated execution environments share compute resources of the host computing device, and wherein each isolated execution environment of the plurality of isolated execution environments is isolated from other isolated execution environments of the plurality of isolated execution environments, and
• an isolated execution environment manager executing on host computing device, wherein the isolated execution environment manager is communicatively coupled with the plurality of isolated execution environments and is configured to manage compute resource allocation of the host computing device;
• obtain location information of the chunk of data, wherein the location information includes a storage location of the chunk of data in the host computing device;
• parse the location information to determine an identity of a plurality of components of the hosted computing environment associated with the chunk of data, the plurality of components including a particular isolated execution environment of the plurality of isolated execution environments that is generated a first portion of the chunk of data, wherein the isolated execution environment manager generates a second portion of the chunk of data;
• generate metadata using the determined identity of the plurality of components;
• generate, at a data intake and query system, an event based on the chunk of data, wherein the event includes the first portion of the chunk of data;
• and
• associate the metadata with the event.