aggregate-pipeline: source: http: processor: - aggregate: identification_keys: [ "sourceIp", "destinationIp" ] action: histogram: key: "latency" record_minmax: true units: "seconds" buckets: [2.0, 4.0, 6.0, 8.0, 10.0] group_duration: "15s" sink: - opensearch: hosts: [ "https://node-0.example.com:9200" ] username: "admin" password: "admin" index: "test-log-metrics-index" flush_timeout: 5000