an expanded aggregation sums an event field per event, aliases included