1. A computer-implemented method, comprising: extracting first one or more values from a plurality of events using a first extraction rule; assigning the extracted first one or more values to a first field of the plurality of events as a first set of field-data item pairs; assigning a field label to the first field; extracting second one or more values and a field label corresponding to the second one or more values from the plurality of the events using a second extraction rule, the extracted field label corresponding to the assigned field label of the first field; and assigning the extracted second one or more values to a second field of the plurality of events as a second set of field-data item pairs, thereby distinguishing the extracted second one or more values from the extracted first one or more values.