move move log aggregation logic to their services