Utilizing shared search queries for defining multiple key performance indicators

A system comprising:

• a memory;
• and
• one or more processing devices coupled with the memory, wherein the one or more processing devices are configured to:
• receive input specifying one or more service definitions, each service definition of the one or more service definitions specifying an entity definition for an entity providing a service of one or more services executing in an information technology (IT) environment being monitored by the service monitoring system, wherein the service monitoring system uses (i) first machine data of a first entity specified by a first service definition of the one or more service definitions to determine a first KPI for a first service of the one or more services and (ii) second machine data of a second entity specified by a second service definition of the one or more service definitions to determine a second KPI for a second service of the one or more services,
• determine that the first machine data and the second machine data include common machine data;
• define, based on the first machine data and the second machine data including the common machine data, a shared base search query for the first KPI and the second KPI, wherein the first KPI is defined based on a first event field of the common machine data, the second KPI is defined based on a second event field of the common machine data, and the second KPI is directed to a different performance measurement than the first KPI;
• execute the shared based search query to generate shared base search query results for the first KPI and the second KPI;
• and
• generate, using the shared base search query results, a first value for the first KPI and a second value for the second KPI.

A non-transitory computer-readable storage medium encoding executable instructions that, in response to execution by one or more processing devices, cause the one or more processing devices to:

• receiving input specifying one or more service definitions, each service definition of the one or more service definitions specifying an entity definition for an entity providing a service of one or more services executing in an information technology (IT) environment being monitored by the service monitoring system, wherein the service monitoring system uses (i) first machine data of a first entity specified by a first service definition of the one or more service definitions to determine a first KPI for a first service of the one or more services and (ii) second machine data of a second entity specified by a second service definition of the one or more service definitions to determine a second KPI for a second service of the one or more services;
• determining that the first machine data and the second machine data include the common machine data;
• defining, based on the first machine data and the second machine data including the common machine data, a shared base search query for the first KPI and the second KPI, wherein the first KPI is defined based on a first event field of the common machine data, the second KPI is defined based on a second event field of the common machine data, and the second KPI is directed to a different performance measurement than the first KPI;
• executing the shared based search query to generate shared base search query results for the first KPI and the second KPI;
• and
• generating, using the shared base search query results, a first value for the first KPI and a second value for the second KPI.