Using BUCKET in agg filters should not be allowed (as it's a grouping function). See example [here](https://github.com/elastic/elasticsearch/pull/113735#discussion_r1784479895). Related #113735