Note that
now-5m
Doesn't mean today minus 5 days.
If you need further help please provide a full recreation script as described in About the Elasticsearch category. It will help to better understand what you are doing. Please, try to keep the example as simple as possible.