I have data in elasticsearch structured like that:
timestamp | user: user1 | file_name: question1 | ... | success: true timestamp | user: user1 | file_name: q