Duo: New Active Users <30 days
Users[?status ==
active
&& time_since(created,
days
)<
30
].[email, created]