collect log parts and aggregate them later

can be merged since feature flipped

i'm still wondering when to actually aggregate the logs. the job:finished event probably isn't good enough because it can happen before all log events have been processed (i.e. all log parts have been created)