Microlesson: Create an aggregation rule in Cloud SIEM