Processing of Log Data and Performance Data Obtained via an Application Programming Interface (API)

A non-transitory machine-readable storage medium for use in a processing system of a data intake and query system, the non-transitory machine-readable storage medium storing instructions, an execution of which in the processing system causes the processing system to perform operations comprising:

• acquiring a plurality of portions of log data from at least one log file, the portions of log data representing activity of at least one hardware or software component of an information technology (IT) environment;
• acquiring a plurality of performance measurements for a performance metric associated with at least one hardware or software component of the IT environment, wherein said acquiring includes acquiring the plurality of performance measurements via an application programming interface (API) of a third-party software application that collects the performance measurements;
• storing the acquired performance measurements and the acquired portions of log data from the at least one log file;
• and
• correlating at least one of the stored performance measurements with at least one of the stored portions of log data from the at least one log file, based on a correlation criterion, wherein said correlating includes causing display of an indication of a performance measurement that satisfies the correlation criterion and causing display of an indication of a portion of log data from the at least one log file, that satisfies the correlation criterion.

A system comprising:

• a communication device through which to communicate on a computer network;
• and
• at least one processor operatively coupled to the communication device and configured to perform operations including
• acquiring a plurality of portions of log data from at least one log file, the portions of log data representing activity of at least one hardware or software component of an information technology (IT) environment;
• acquiring a plurality of performance measurements for a performance metric associated with at least one hardware or software component of the IT environment, wherein said acquiring includes acquiring the plurality of performance measurements via an application programming interface (API) of a third-party software application that collects the performance measurements;
• storing the acquired performance measurements and the acquired portions of log data from the at least one log file;
• and
• correlating at least one of the stored performance measurements with at least one of the stored portions of log data from the at least one log file, based on a correlation criterion, wherein said correlating includes causing display of an indication of a performance measurement that satisfies the correlation criterion and causing display of an indication of a portion of log data from the at least one log file, that satisfies the correlation criterion.