Right, usually law enforcement gets chat logs from a participant (search warrant for a phone, informants, undercover FBI agents, etc) and uses the metadata to connect messages to a real person's identity.