1. A computer-implemented method, comprising: receiving raw data on a computing device; determining boundaries that divide the raw data into a set of events; assigning a time stamp to each event in the set of events; identifying a subset of events in the set of events; compressing the raw data that includes the subset of events; storing the compressed raw data that includes the subset of events; determining a compression offset for the compressed raw data that includes the subset of events, wherein the compression offset indicates a location of the compressed raw data that includes the subset of events; storing the compression offset in a compression index; associating one or more uncompressed offsets with the compression offset, wherein each uncompressed offset includes information for identifying one of the events in the raw data that includes the subset of events; receiving an indication to retrieve a particular event in the subset of events; using the compression index to identify the compression offset indicating the location of the compressed raw data that includes the particular event; and using the compression offset and an associated uncompressed offset to locate the particular event.