es_query.json

{
  "query": {
    "filtered": {
      "query": {
        "query_string": {
          "query": "event:purchase_confirmation",
          "analyze_wildcard": true
        }
      },
      "filter": {
        "bool": {
          "must": [
            {
              "query": {
                "query_string": {
                  "query": "*",
                  "analyze_wildcard": true
                }
              }
            },
            {
              "range": {
                "timestamp": {
                  "gte": 1449255601903,
                  "lte": 1454439601903,
                  "format": "epoch_millis"
                }
              }
            }
          ],
          "must_not": []
        }
      }
    }
  },
  "size": 0,
  "aggs": {
    "1": {
      "sum": {
        "field": "cards.value"
      }
    }
  }
}