gistfile1.txt

{
  "size": 10,
  "from": 0,
  "highlight": {
    "fields": {
      "Content": {}
    },
    "pre_tags": [
      "XT"
    ],
    "post_tags": [
      "YT"
    ]
  },
  "query": {
    "bool": {
      "must": [
        {
          "has_child": {
            "type": "attachment",
            "query": {
              "query_string": {
                "query": "poison",
                "default_field": "ExtractedContent"
              }
            }
          }
        }
      ],
      "should": [
        {
          "query_string": {
            "query": "poison",
            "default_field": "Content"
          }
        }
      ]
    }
  }
}