Hello, i group my events in transactions by user and day ...| transaction user day and then calculate duration, eventcount, time of transaction started and finished in logs there are fields action_type and action_time i want transaction to start with action_type=login and action_time for this action_type for this user and day is minimal, i.e. i want start transaction since first time user login this day
something like this... | transaction user day startswith=min(action_time for action_type=login)
What commands should i write? Thank a lot for answers!