It basically says that you should allow sufficient buffer time for events to be written to indexes and while doing the schedule, the search time range should accommodate that buffer time. E.g. You want to search to run every 5 min and process last 5 min data, use something like this
earliest=-7m@m
latest=-2m@m [2 min buffer time]
cron : 2-59/5 * * * * [run the search on 3rd minute of the hour, like 2,7,12,17,...
minutes. This will allow you to capture data for full 5 min
periods like 0-5 will get captured by search running on minute 7
(-7m to -2m) and 6-10 will get captured by search on 12(-7m to -2m).
... View more