Ok. But, that seems inefficient for massive logs across 20+ markets. I encourage you to add a log for this in the future.
What am I looking for in the logs that would indicate that it's a user-created order?
there's a specific string you can easily find after create a ping, something like "Order create from GUI"