Hängen Sie einfach eines von diesen an:
responseCode:(401 403)
responseCode:(401 OR 403)
responseCode:(401 || 403)
So:
http://localhost:9200/response_summary/_search?q=api:"location"+AND+transactionoperationstatus:"charged"+AND+operatorid='DIALOG'+AND+userid:test+AND+time:"2015-05-27"+AND+responseCode:(401+403)