Monitoring service-level performance using key performance indicators derived from machine data

A system comprising:

• a memory;
• and
• a processing device coupled with the memory to:
• access a search query from computer storage and executing the search query automatically on a repeated basis, wherein, for each execution, the search query transforms machine data to a value by deriving the value from machine data associated with one or more entities that provide a service, the value indicating a measure of performance of the service at a point in time or over a period of time;
• and
• represent each derived value in computer storage to produce a recorded time series for the measure;
• wherein each of the one or more entities is represented in computer storage by an entity definition that associates the entity with machine data pertaining to the entity, and each entity definition is included in a service definition representing the service in computer storage;
• wherein the machine data reflects activity in an information technology environment and is produced by one or more components of the information technology environment.

A non-transitory computer readable storage medium encoding instructions thereon that, in response to execution by one or more processing devices, cause the processing device to:

• access a search query from computer storage and executing the search query automatically on a repeated basis, wherein, for each execution, the search query transforms machine data to a value by deriving the value from machine data associated with one or more entities that provide a service, the value indicating a measure of performance of the service at a point in time or over a period of time;
• and
• represent each derived value in computer storage to produce a recorded time series for the measure;
• wherein each of the one or more entities is represented in computer storage by an entity definition that associates the entity with machine data pertaining to the entity, and each entity definition is included in a service definition representing the service in computer storage;
• wherein the machine data reflects activity in an information technology environment and is produced by one or more components of the information technology environment.