Abstract: A data intake and query system establishes a network connection with an instrumented target system. The instrumented target system collects metrics in accordance with an instrumentation platform, whereby the instrumentation platform defines an instrumentation platform query. The metrics are stored in the data intake and query system. A data intake and query system query for a subset of metrics is transmitted. The data intake and query system query replicates the instrumentation platform query of the instrumentation platform. From the data store, log data for the instrumented target system, and correlated with the metrics to obtain correlated results.

Abstract: Systems and methods are described for updating text files for a processing pipeline without restarting the processing pipeline. A processing pipeline may include a frontend thread and a backend thread. The frontend thread of the processing pipeline may generate transformed data using the text file. A backend thread of the processing pipeline may periodically determine whether an updated text file has been uploaded. The backend thread can determine that an updated text file has been uploaded and cause the frontend thread to pause generating transformed data. The backend thread can validate the updated text file by comparing the text file and the updated text file. Based on validating the updated text file, the backend thread can cause the frontend thread to resume transforming data using the updated text file.

Abstract: Systems and methods are described for performing dynamic data enrichment in accordance with data streaming. In this regard, dynamic data enrichment can be performed to process data later ingested into an indexing system. In performing dynamic data enrichment, a message can be obtained via a data stream. The message is analyzed to identify a data portion within the message to add to a lookup table. Thereafter, the data portion is written to the lookup table to enhance the lookup table with data from the message. The enhanced lookup table can then be used to lookup a data value to append to the message to enrich the message, and the enriched message can be output (e.g., to an indexing system).