We have noticed that when disabling an alert in the UI the alert status remains at it's last value instead of changing to "unknown". This differs from the APM alerts and is used as a confirmation that the alert has been disabled.
Is this behavior by design?
If stating about the Alerting (Settings >> Alarms) . Then , yes its by design. It retains the last state.