A computer-implemented method, system, and article of manufacture for extracting and processing event data from heterogeneous computer applications. The method includes providing a computer system having software modules for performing the steps of: receiving data related to a first event; identifying a data type of the first event based on data type definitions; selecting a set of extraction rules for extracting an attribute of an event having the identified data type; extracting the first attribute from the first event data based on the set of extraction rules; and mapping the first attribute to an event attribute of a unified structure.