Querying across different log data source types

A non-transitory machine-readable storage medium that provide instructions, which when executed, are configurable to cause a machine to perform operations comprising:

• attempting to classify, according to a plurality of field types, label fields used by structures in instances of different log data source types, wherein the different log data source types use different structure types and different path information to access the structures of those structure types within the instances, wherein each of the instances includes at least one structure, wherein each of the structures includes at least one of the label fields and at least one data field associated with the at least one of the label fields, wherein the label fields store field labels descriptive of the associated data fields;
• responsive to submission of a system level query, generating a set of one or more instance level queries based on a result of the attempting and a set of one or more of the plurality of field types involved in the system level query;
• submitting the set of one or more instance level queries to a set of one or more of the instances;
• receiving a set of one or more instance level query results responsive to the submitting;
• and
• transmitting the instance level query results as a response to the submission of the system level query.