gistfile1.txt

{
  "query": {
    "filtered": {
      "query": {
        "query_string": {
          "query": "*",
          "analyze_wildcard": true
        }
      },
      "filter": {
        "bool": {
          "must": [
            {
              "range": {
                "@timestamp": {
                  "gte": 1464665675839,
                  "lte": 1464666575839,
                  "format": "epoch_millis"
                }
              }
            }
          ],
          "must_not": []
        }
      }
    }
  },
  "size": 0,
  "aggs": {
    "6": {
      "filters": {
        "filters": {
          "total:<5000": {
            "query": {
              "query_string": {
                "query": "total:<5000",
                "analyze_wildcard": true
              }
            }
          }
        }
      },
      "aggs": {
        "5": {
          "histogram": {
            "field": "total",
            "interval": 100,
            "min_doc_count": 0,
            "extended_bounds": {
              "max": 5000
            }
          }
        }
      }
    }
  }
}