Sounds like a “last known state” type of problem.
This is normally best solved by building an entity-centric index from your log index. This can be done using the transform api and requires some scripting to record the last known state for each entity.
1 Like