1. A computer-implemented method, comprising: receiving from a user a selection of an object included in a data model, the selection made through an object-selection interface; based on receiving the user selection of the object, retrieving from computer memory a previously stored object definition that corresponds to the selected object and that includes: an object query that, when executed, retrieves a set of time stamped events from a data store on a computing device, each event including a portion of raw machine data reflecting activity in an information technology environment; and an object schema identifying a set of one or more fields, each field defined by an extraction rule or regular expression that can be used to extract a value for the field from each event in a subset of the set of time stamped events, each extraction operating on the raw machine data in an event without modifying the event's raw machine data; and executing, against events in the data store that meet filtering criteria of the object query, a search query that uses only fields that are included in the object schema and that produces a result based at least in part on the data reflecting the activity of the information technology environment.