1. A method executed by a computer, comprising: receiving a report search query from one more event data collectors; parsing the report search query to determine a specified attribute of an event being searched; retrieving values or statistics associated with the specified attribute; determining a co-occurring attribute of the specified attribute; aggregating at least one of values or statistics associated with the co-occurring attribute; and generating a report that includes at least one of the values or statistics associated with the co-occurring attribute.