1. A method for processing log data, the method comprising: determining, by a computing device, a set of data chunks, each data chunk includes a set of events clustered according to a primary time dimension field of each event of the set of events; for each data chunk of the set of data chunks, determining a metadata structure that comprises a range of the primary time dimension field of all of the events in the data chunk and a range of a secondary time dimension field of all of the events in the data chunk; selecting a subset of the data chunks; disassembling the subset of data chunks into a plurality of events; and generating a data chunk including at least one event of the plurality of events, the event is clustered in the data chunk according to the secondary time dimension field of the at least one event.