1. A computer-implemented method comprising: receiving machine data from a computing cluster, the computing cluster including a plurality of computational nodes; generating a plurality of time stamped events from the received machine data, each time stamped event having a time stamp derived from data parsed from the received machine data; analyzing data in a subset of events in the plurality of time stamped events using heuristic analysis to identify an occurrence of an event pattern that is the same as or similar to one or more registered event patterns; generating a notification upon identification of the occurrence of the event pattern.