Yes, the significance of the “specific_date_time_value” is that certain users will want to query based on that to determine if it’s a device that they should re

Yes, the significance of the “specific_date_time_value” is that certain users will want to query based on that to determine if it’s a device that they should remediate. A large percent of the queries though would be based on now() vs a specific date. In all of these approaches the issue occurs when I add the grouping stage as it doesn’t seem to be a way to just get the earliest value for each device without reading all records for each device. Could you explain the queue to surface the next event easily?