Oh I see, sorry about that! I thought the question was about index design and missed the Kibana requirement 
Some alternatives for this have been discussed here - basically using a flattened structure, or using a custom Vega visualization over a nested query.