HI, thanks for asking. For now, I have removed the elastic-stack-alerting label as I don't follow how it relates. I could guess you are doing this testing in the context of some alerts usage? It may help later, but the core question seems unrelated so I'm not deep enough into Elasticsearch to be able to help.
We can ask another team for help on this if you can offer more content - and someone will write back either way, I expect. Let us know. Cheers.