Buckets now include the node name and the timestamp of the logs (by hour or minute). Now we are ready to analyze different buckets from same time-span and different nodes.