keywords, tokenized (for free) and aggregated

gistfile1.txt

curl -X GET "http://elastic-04:9200/logstash-2015.04.07/_search/?pretty" -d'
{
    "size" : 0,
    "query": {
        "filtered": {
            "query": {
                "match": {"query_string.userId[muid]" : "46bce8bec4abf177"}
            },
            "filter": {
                "range": {
                    "@timestamp": {
                        "gt" : "now-1m"
                    }
                }
            }
        }
    },
    "aggs" : {
        "keyword_count" : { "terms" : { "field" : "query_string.keywords" } }
    }
}'