1. A method for facilitating the processing of network data, comprising: providing, on a computer system, a risk-identification mechanism for identifying a security risk from time-series event data generated from network packets captured by one or more remote capture agents distributed across a network; and providing, on the computer system, a capture trigger for generating additional time-series event data from the network packets on the one or more remote capture agents based on the security risk, wherein the additional time-series event data comprises one or more event attributes.