We see the same behavior as described at Why were my triggered alerts cleared after restart?
Is there a way around it in 7.3.3 and is the behavior different in ES?
