anchor.diff:    },
     "condition": {
       "compare": {
  -      "ctx.payload.hits.total.value": {
  +      "ctx.payload.hits.total": {
           "gt": 0
         }
       }
  
positive.code:           "aggs": {
              "group_by_city": {
                "terms": {
                  "field": "group.group_city.raw", <3>
                  "size": 5
                },
                "aggs": {
                  "group_by_event": {
                    "terms": {
                      "field": "event.event_url.raw", <4>
                      "size": 5
                    },
                    "aggs": {
  
negative.code:     "search": {
        "request": {
          "indices": [
            "logstash" <1>
          ],
          "body": {
            "size": 0,
  