{
  "query": {
    "filtered": {
      "query": {
        "bool": {
          "should": [ {
            "query_string": {
              "query": "tags:marked"
            }
          }, {
            "query_string": {
              "query": "type:access"
            }
          } ]
        }
      },
      "filter": {
        "bool": {
          "must": [ {
            "fquery": {
              "query": {
                "query_string": {
                  "query": "subscriberId:18856396"
                }
              },
              "_cache": true
            }
          }, {
            "range": {
              "@timestamp": {
                "from": 1405602440103,
                "to": 1406207240103
              }
            }
          } ]
        }
      }
    }
  },
  "highlight": { ... },
  "size": 1000,
  "sort": [ ... ]
}