[rules-users] Writting a fusion query with specific time intervals