GET /some-index/_search
{
  "query": {
    "exists": {
      "field": "user"
    }
  }