1. A method comprising: performing a first search query in response to user input to produce a search result set comprising one or more entries each having one or more data items, each data item having an ordered position within the entry; causing display of the entries in a table of a user interface, the table having rows and columns, wherein the data items of each entry appear in respective columns of the same row; receiving user input designating, for a column of the table, information for at least one of identifying or locating a data item appearing in the column within an entity definition; and storing the data item appearing in the column in the entity definition in accordance with the user input; wherein the entity definition represents an entity from among one or more entities that provide a service, the entity definition having an identification of machine data produced by or about the entity, the service having a Key Performance Indicator (KPI) defined by a second search query that derives a value at least in part from the machine data, thereby transforming the machine data to the value indicating the performance of the service at a point in time or during a period of time; wherein the method is performed by a computer system comprising one or more processing devices.