1. A method comprising: receiving, by a processing device, a plurality of discrete log entries from a first data store; and generating, by the processing device, an event for each discrete log entry of the plurality of discrete log entries that satisfies a criterion, wherein generating the event for a discrete log entry comprises: determining a source type associated with the discrete log entry; parsing the discrete log entry based on the source type; determining a plurality of fields of the discrete log entry; identifying a subset of the plurality of fields, wherein one or more fields in the subset are to be used as link keys for linking together events; assigning a field type to each field in the subset of the plurality of fields; and writing a plurality of event entries for the event into a second data store, wherein a separate event entry is written to the second data store for each field of the subset of the plurality of fields having an assigned field type.