plugins.security:
  audit:
    type: org.opensearch.security.auditlog.helper.SlowSink
    endpoints:
      endpoint1:
        type: org.opensearch.security.auditlog.helper.SlowSink
    routes:
      MISSING_PRIVILEGEs:
        endpoints:
          - endpoint1
    fallback:
      type: org.opensearch.security.auditlog.helper.LoggingSink