Applying ml jobs on raw data without installing network packet beats or other beats

I have forwarded my raw log to elastic (custom udp integration), i have not installed beats(eg: packetbeat and other). I could see some of rules like below,

DNS Tunneling

"query": {
"bool": {
"filter": [
{
"term": {
"agent.type": "packetbeat"
}
}
],
"should": [
{
"term": {
"event.dataset": "dns"
}
},
{
"term": {
"event.dataset": "network_traffic.dns"
}
}
],
"minimum_should_match": 1,
"must_not": [
{
"bool": {
"filter": {
"term": {
"destination.ip": "169.254.169.254"
}
}
}
}
]
}
},

how to apply this ml to my log?