If you know which reports you need, you can pre-aggregate your data. The problem you are seeing is caused by there being too many docs that you are aggregating on the fly, at read-time.
Otis
Monitoring * Alerting * Anomaly Detection * Centralized Log Management
Solr & Elasticsearch Support * http://sematext.com/