How to do aggregation in elastic?

Question

elasticsearch

Logs of 3 events are recorded in the elastic index:

1. The product was successfully unloaded from 1C
2. The product was successfully imported into the store.
3. When importing goods into the store, there was an error

Example of documents:

{
     "type": "EXPORT_1C",
     "PRODUCT_ID "=> 12,
     "MESSAGE": "..."
},
{
     "type": "EXPORT_1C",
     "PRODUCT_ID "=> 13,
     "MESSAGE": "..."
},
{
     "type": "SUCCESS_IMPORT",
     "PRODUCT_ID "=> 12,
     "MESSAGE": "..."
},
{
     "type": "ERROR_IMPORT",
     "PRODUCT_ID "=> 234,
     "MESSAGE": "..."
}

It is required to get a list of Identifiers that were uploaded from 1C,
but were not imported to the portal (either there is no record of a successful import, or an import with an error).