1. A method comprising: causing display of a set of graph lanes corresponding to a plurality of key performance indicators (KPIs) that each indicate how a service is performing during a first period of time, wherein the set of graph lanes illustrate multiple KPI values of the plurality of KPIs during the first period of time; receiving a user request to create a definition of a correlation search based on the set of graph lanes, the correlation search to trigger an action when the plurality of KPIs are within a user-defined range of KPI values illustrated by the graph lanes during a second period of time; and in response to the user request, creating the definition of the correlation search, wherein the creating of the definition of the correlation search comprises: for multiple graph lanes within the set, determining a KPI criterion for a corresponding KPI based on fluctuations in the KPI during the first period of time; generating an aggregate triggering condition using KPI criteria determined for the plurality of KPIs; and adding the aggregate triggering condition to the definition of the correlation search, the definition of the correlation search further comprising data identifying the plurality of KPIs and the action to be triggered when each of the plurality of KPIs satisfies a respective KPI criterion from the aggregate triggering condition during the second period of time; wherein the method is performed by one or more processing devices.