1. A method, comprising: causing graphical display, on a client device, of a user interface; sending, to a plurality of computing systems, a search request to search a set of time stamped events, wherein the search request was received from the client device via the user interface; receiving, from two or more computing systems among the plurality of computing systems, at least two sets of search results and event references, wherein each set of search results of the at least two sets of search results includes information associated with one or more time stamped events that satisfy the search request, and each of the event references includes an event identifier and an order value corresponding to each of the one or more time stamped events that satisfy the search request; aggregating the at least two sets of search results into an aggregated search result by merging the event references into a global ordered list of the event references based on the order values of the event references; causing graphical display, within the user interface, of information based on the global ordered list of the event references of the aggregated search result; in response to receiving input requesting additional information from at least a portion of the aggregated search result, determining a set of event identifiers corresponding to time stamped events included in the at least a portion of the aggregated search result; sending, to the two or more computing systems, a request for time stamped events corresponding to the set of event identifiers; receiving, from the two or more computing systems, the requested time stamped events; and causing display, within the user interface, of the requested additional information using the received requested time stamped events.