@timestamp is also defined as date:
"properties": {
"@timestamp": {
"type": "date"
},
Just to be sure i did run same query against last 24 hours only (two indexes affected, same mappings) and it took 33 000ms ... a lot, just 585 results in total out of 3GBs of data.
