Abstract: A computerized method is disclosed including establishing communicative couplings with each of a first data intake and query system instance and a second data intake and query system instance, automating execution of a first search query on the first data intake and query system instance and a second search query on the second data intake and query system instance, and causing rendering of a graphical user interface that consolidates results from each of the first data intake and query system instance and the second data intake and query system instance. Additional operations may include obtaining a result of the first search query while preserving fields within the results of the first and second search queries extracted by the first data intake and query system instance and the second data intake and query system instance, respectively.

Abstract: A computerized method is disclosed including operations of establishing a first communicative coupling with a first data intake and query system instance and a second communicative coupling with a second data intake and query system instance, automating performance of a search query on each of the first data intake and query system instance and the second data intake and query system instance, automating retrieval of search results from each of the first data intake and query system instance and the second data intake and query system instance, and generating instructions that, upon execution by one or more processors, cause rendering of a graphical user interface that displays the search results from each of the first data intake and query system instance and the second data intake and query system instance in a consolidated view. Additionally, performance of the search query occurs at a predetermined interval.