Abstract: An example method includes collecting, at a computing system of a data intake and query system, source data corresponding to an instance of a service hosted by a service provider, wherein the service provider hosts the service on a network of the service provider, identifying in the source data a set of metrics for the instance of the service, applying a machine learning model to the set of metrics to determine a classification for the set of metrics, generating, using the classification, a recommendation, wherein the recommendation relates to usage by the instance of the service of one or more physical resources of the service provider, and transmitting, for receipt by a client device, data comprising the recommendation, wherein the data enables display on the client device of a visualization comprising the recommendation.

Abstract: An automatic service monitor in an information technology environment has its operation controlled by information that, in part, define entities that perform services and define key performance indicators (KPIs) that indicate measures of performance of the services. KPIs are defined in terms of search queries applied against machine data by or about the entities that perform the services. The search query aspects of multiple KPI definitions may be tied to a shared base search. Implementation of the shared base search may permit improved performance of the service monitor and may permit a reduction in administrative burden.

Abstract: An automatic service monitor in an information technology environment has its operation controlled by information that, in part, define entities that perform services and define key performance indicators (KPIs) that indicate measures of performance of the services. KPIs are defined in terms of search queries applied against machine data by or about the entities that perform the services. The search query aspects of multiple KPI definitions may be tied to a shared base search. Implementation of the shared base search may permit improved performance of the service monitor and may permit a reduction in administrative burden.