That's expected behavior. What you see is the actual logs themselves. They still pass through to the output since you're not dropping them specifically.
The aggregation filter does not alter the original messages themselves, it just creates new ones. You should be seeing aggregated events 1 hour after Logstash started.
More specifically, each new user_id's relevant aggregated event should spawn 1 hour after the first time you receive that user_id.