GET /_search { "query": { "exists": { "field": "user" } } }
GET /_search { "query": { "bool": { "must_not": { "exists": { "field": "user" } } } } }