User interface to identify one or more pivot identifiers and one or more step identifiers to process events

A computing system, comprising:

• one or more processing devices configured to:
• execute a query on events in a computer system, each event including raw machine data associated with a time stamp;
• obtain fields based on a plurality of events that are identified from the query;
• populate a graphical user interface with field identifiers of at least a subset of fields of the obtained fields;
• and
• enable, via the graphical user interface, identification of one or more fields of the subset of fields as one or more step identifiers, one or more pivot identifiers, or one or more attributes.

Non-transitory computer readable media comprising computer-executable instructions that, when executed by a computing system, cause the computing system to:

• execute a query on events in a computer system, each event including raw machine data associated with a time stamp;
• obtain fields based on a plurality of events that are identified from the query;
• populate a graphical user interface with field identifiers of at least a subset of fields of the obtained fields;
• and
• enable, via the graphical user interface, identification of one or more fields of the subset of fields as one or more step identifiers, one or more pivot identifiers, or one or more attributes.