Im duplicating since nobody relied on the alerting channel.
I have ES+Kibana with JWT enabled.
I configured an index with document level security that uses jwt claims.
the “discover” queries does use the filter as excepted, but when I try to create a monitor that queries the same index I always get empty results.
here is the link for the issue: