pipeline1:
  source:
    http:
  sink:
    - pipeline:
        name: "pipeline2"
    - pipeline:
        name: "pipeline3"

pipeline2:
  source:
    pipeline:
      name: "pipeline1"
  processor:
    - substitute_string:
        entries:
          - source: "message"
            from: "word"
            to: "WORD"
  sink:
    - opensearch:
        hosts: [ "https://node-0.example.com:9200" ]
        username: "admin"
        password: "admin"
        index: "test-substitute-index"
        flush_timeout: 5000

pipeline3:
  source:
    pipeline:
      name: "pipeline1"
  processor:
    - grok:
        match:
          message: ['%{WORD:word1} %{WORD:word2} %{WORD:word3}']
  sink:
    - opensearch:
        hosts: [ "https://node-0.example.com:9200" ]
        username: "admin"
        password: "admin"
        index: "test-grok-index"
        flush_timeout: 5000