$params = [
            'index' => ['filebeat-'.date('Y.m.d'), 'filebeat-'.date('Y.m.d', strtotime('yesterday'))],
            'body' => [
                'size' => 0,
                'aggs' => [
                    'group_by_state' => [
                        'terms' => [
                            'field' => 'beat.name',
                            'size' => 10000
                        ]
                    ]
                ]
            ]
        ];