split log by binary
oam helpers
time_to_unix
flow logs