1. A method, comprising: organizing into a plurality of events machine data received from at least two different sources, wherein each source produces machine data having a different format, and wherein each event in the plurality of events includes machine data from only one source and includes an unaltered portion of machine data from that source in the format associated with that source; determining a time stamp for each event in the plurality of events; performing a search on the plurality of events.