A method and system for processing user defined operations on collected network data is provided. Monitors collect data from network devices and store the collected data in a database. The monitors collect data relating to the user defined operation. After the data is collected, the user defined operation is performed on the collected data. The user may then view the result.