Whenever you use objects inside of arrays, it doesn't really play well with Kibana. You'll have a lot more luck if you create a separate rules index, and index each of the objects inside rules separately. Then you'd easily be able to create a visualization like you've mentioned.