* (elasticsearch): add nested agg (use bucket aggs). fixes #4693 * (elasticsearch): rebased after merge of #6043 refactored from #4527
