diff --git a/x-pack/plugins/infra/public/components/alerting/logs/expression_editor/editor.tsx b/x-pack/plugins/infra/public/components/alerting/logs/expression_editor/editor.tsx
index 8bdffbeb36f3..06855cc7e765 100644
--- a/x-pack/plugins/infra/public/components/alerting/logs/expression_editor/editor.tsx
+++ b/x-pack/plugins/infra/public/components/alerting/logs/expression_editor/editor.tsx
@@ -129,7 +129,7 @@ export const Editor: React.FC<Props> = props => {
   const { sourceStatus } = useLogSourceContext();
 
   useMount(() => {
-    for (const [key, value] of Object.entries(DEFAULT_EXPRESSION)) {
+    for (const [key, value] of Object.entries({ ...DEFAULT_EXPRESSION, ...alertParams })) {
       setAlertParams(key, value);
       setHasSetDefaults(true);
     }