% This is generated by ESQL's AbstractFunctionTestCase. Do not edit it. See ../README.md for how to regenerate it.

**Example**

```esql
TS k8s
| STATS count=COUNT(COUNT_OVER_TIME(network.cost))
  BY cluster, time_bucket = BUCKET(@timestamp,1minute)
```

| count:long | cluster:keyword | time_bucket:datetime |
| --- | --- | --- |
| 3 | staging | 2024-05-10T00:22:00.000Z |
| 3 | prod | 2024-05-10T00:20:00.000Z |
| 3 | prod | 2024-05-10T00:19:00.000Z |