1. A method comprising: receiving an event, the event comprising a data section containing a set of strings each containing an event field; referencing a definition table to determine locations of event fields in the data section of the event; and storing the event fields in a database record corresponding to event field locations referenced from the definition table.