EventTime indexing issue for user.login