Clustering a log service