Trying out the ElasticSearch Alerting in 5.2.x

@anon34853223 - Setting the explicit interval seems to adjust the number.
The only pattern I can see is the number seems to represent the amount of points plotted, not the actual Y Axis value.

Edit: Looks like the problem is the alert function I’m using.
Effectively I’m doing a ‘count of a count’, which I guess does mean the plotted points count as opposed to count of elasticsearch documents in the query.
Adjusting to say, ‘sum()’ produces the expected results.
Or even using ‘last()’ if I wanted a more instant result.