I want to set up an alert in Kibana Observability where if the number of records returned for
event.dataset: login and event.outcome: failure is greater than 10 for the past minute, then set the alert rule to active.
I'm not sure which rule type I'm supposed to use for that. I read that there is an Index Threshold Rule Type: Index threshold | Kibana Guide [8.5] | Elastic . But I don't see it available in my Kibana version 8.5, see this screenshot.
What rule type should I be using? Or how should I go about accomplishing my goal of being notified of failed login attempts within the past minute?