add per document alerting in bucket level monitor for security analytics

add per document alerting in bucket level monitor for security analytics #951