Query - How to monitor a process running on multiple hosts using Kibana Rules?

Hi, is there any way to monitor a process running on multiple remote hosts using Kibana Rules,

  1. I tried using Metric threshold type of rule and was checking the number of documents related to the process to monitor if a process is running or not ( 0 docs returned means the process is not running). And I am facing a scenario here i.e. when the process is not running the doc count will be zero and the rule should trigger an alert but it does not since it is not considering the doc count equals 0 but instead it is treating the scenario as exceptional case i.e. no data found and is not triggering an alert

If you have any suggestions on how to handle this scenario it would be very helpful