1. A computer-implemented method, comprising: accessing a set of events for a computing system, wherein each event in the set includes a portion of raw machine data, and wherein at least two events have their respective portions of raw machine data in different data formats; extracting a plurality of values from the events using an extraction rule, wherein the extraction rule defines where to find a field within the portion of raw machine data in an event and how to extract the value of the field without modifying the portion of the raw machine data; causing display of a plurality of the events in a first portion of a graphical interface, wherein values extracted from the displayed events are emphasized in the displayed events; causing display of a subset of the plurality of extracted values in a second portion of the graphical interface; determining a statistic that is a proportion of events that include the extracted values for the displayed subset of the extracted values; and causing display of the statistic in the second portion of the graphical interface; wherein the second portion and the first portion are concurrently displayed in a same graphical interface.