How watcher query the elasticsearch based on time interval