Hi @rahul,
Regarding case 1: isn’t it plausible that a small number of visitors logs into more than one account in a single session? Perhaps I misunderstand the issue.
Regarding case 3: what is used as the user identifier in this case, the user ID or the domain user ID? If it’s the user ID, I’d investigate whether or not these are users that are logged in one more than one browser or device at once.
If it’s the domain user ID, I’d like to confirm that the events are sorted on the dvce_created_tstamp. Would you mind sharing the SQL you’re running to investigate this case?
Christophe