I'm sort of surprised that we can't do this with a reduce. I would think there would be lots of logs emitting the same user/device combo and we'd want to take advantage of that. am i missing something?