Hi,
I'm using kibana 6.2.3 and the alerting feature. When I setup a single or just a few monitors there are no issues but when I have 10 to 15ish monitors I start to get false positives. Each monitor is running every 10 minutes and looking at the past 10 minutes of logs. The filters are specific to individual fields and are not complex at all. I'm also not spanning indices.
Has anyone else seen or experienced this issue? Could the alerts be triggered from queries taking too long and the default kibana action is to raise it as an alert?