我有以下查询,从中获取数据并创建过去每个小时的聚合:query={"query":{"bool":{"must":[{"term":{"deviceId":device}},{"match":{"eventType":"Connected"}}],"must_not":[{"query_string":{"query":"Pong","fields":["data.message"]}},]},},"size":0,"sort":[{"timestamp":{"order":"desc"}}],"aggs":{"time_buckets":{"date_histogram":{"fie