1. A method, comprising: receiving a portion of a natural language query of a data store; generating, based at least in part on the portion of the natural language query, a prediction of a plurality of phrases identifying a service component metric of an information technology (IT) system, a service component log of the IT system, or a service component event of the IT system, wherein generating comprises: identifying an outlier indicator for the service component metric, the service component log, or the service component event, wherein the outlier indicator indicates irregular behavior specifically by the service component metric, the service component log, or the service component event that exceeds or falls below a baseline standard; and including the service component metric, the service component log, or the service component event with the outlier indicator in at least one of the plurality of phrases; sorting the predicted plurality of phrases to order the service component metric, the service component log, or the service component event with the outlier indicator earlier in a sort order than other service component metrics, service component logs, or service component events without the outlier indicator; proposing the sorted predicted plurality of phrases for completing the natural language query; and receiving a selection of a proposed predicted phrase of the proposed predicted plurality of phrases.