[brazzledazzle]

Correct me if I'm wrong, but wouldn't this allow for a much richer set of alerts since you're able to use the elastic search query syntax? This also allows you to alert on an empty result set which can be pretty handy.