1. A method comprising: building, with a computer, a model of multi-dimensional sequence data in real-time with cuboids that aggregate the multi-dimensional sequence data over both patterns and dimensions, wherein building the model in real-time includes: processing event instances into a base cuboid of the model as the event instances come; and incrementally updating one or more other cuboids in the model by propagating the event instances bottom-up through a pattern hierarchy and a category hierarchy; and providing, with a computer, search results for a query in real-time as events that are aggregated into the multi-dimensional sequence data occur.