1. A computer-implemented method comprising: receiving machine data from one or more data sources, the machine data related to performance aspects of one or more information technology systems; parsing the received machine data to determine event boundaries within the received machine data to generate a plurality of time stamped events, thereby transforming the received machine data into the plurality of time stamped events, the time stamp for each event extracted from the parsed machine data associated with that event; analyzing the plurality of time stamped events using heuristics to identify an occurrence of an event pattern; comparing the occurrence of the event pattern to one or more registered event patterns to identify whether the event pattern is an anomalous pattern, the one or more registered event patterns indicative of performance aspects of the one or more information technology systems; and generating a notification based upon the identification.