@mik1234 Did you solve your issue? This is my working monitor with aggregation and buckets
Opensearch bucket monitor - #3 by pablo.