1. A computer-implemented method for processing network data, comprising: obtaining, at a remote capture agent, configuration information for the remote capture agent from a configuration server over a network; using the configuration information to configure the generation of event data from network data obtained from network packets at the remote capture agent; and using the configuration information to configure transformation of the event data or the network data into transformed event data at the remote capture agent; wherein the transformation of the event data or the network data comprises one or more of, normalizing different representations of the same data, and performing a data-enrichment operation that uses an address from the event data or the network data to look up related data in a lookup table, and include the related data in the transformed event data.