Currently, the ES input plugin has no way to pick up from where it left off last time it executed, just as the JDBC input does with the sql_last_value value.
I propose a set of configurations that makes ES input plugin query from a past known @timestamp (by default)