The timestamp would work fine, but if you do a dense_rank you could easily include the number of events per message. They're not doing that in the example but p

The timestamp would work fine, but if you do a dense_rank you could easily include the number of events per message. They're not doing that in the example but perhaps the application they're basing the blog on does.