Machine data web

An apparatus, comprising:

• a machine data organization subsystem, implemented at least partially in hardware, that organizes into a plurality of events machine data from a plurality of diverse sources, wherein there is no obvious common structure shared among the machine data from the plurality of diverse sources, and wherein machine data included in each event in the plurality of events retains its original structure;
• a time stamp subsystem, implemented at least partially in hardware, that determines a time stamp for each event in the plurality of events;
• a search subsystem, implemented at least partially in hardware, that performs a search on the plurality of events.

A non-transitory computer-readable medium storing one or more sequences of instructions, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform:

• organizing into a plurality of events machine data from a plurality of diverse sources, wherein there is no obvious common structure shared among the machine data from the plurality of diverse sources, and wherein machine data included in each event in the plurality of events retains its original structure;
• determining a time stamp for each event in the plurality of events;
• performing a search on the plurality of events.