Onboard Index Threshold Rule Type to use FAAD

[ersin-erdal]

Resolves: #164222

This PR replaces AlertFactory in ES Query rule type with AlertsClient so the alerts are persistent in an alert-as-data index.

[elasticmachine]

Pinging @elastic/response-ops (Team:ResponseOps)

[ersin-erdal]

@elasticmachine merge upstream

[ymao1]

LGTM! Able to see AAD docs for index threshold rule type! Left a few nits

[kibana-ci]

💔 Build Failed

• Buildkite Build
• Commit: dbc75d9
• Interpreting CI Failures

Failed CI Steps

• FTR Configs #62
• Serverless Observability Tests
• Serverless Observability Examples Tests
• Serverless Security Cypress Tests #5
• Serverless Security Cypress Tests #9
• Serverless Security Investigations Cypress Tests #5
• Serverless Security Investigations Cypress Tests #5
• Serverless Security Investigations Cypress Tests #6

Test Failures

• [job] [logs] FTR Configs #62 / Actions and Triggers app logs list "after all" hook for "should not show the logs space switch when multiple spaces exist but only one is accessible"
• [job] [logs] FTR Configs #62 / Actions and Triggers app logs list should show the logs space switch when multiple spaces are accessible
• [job] [logs] Serverless Security Cypress Tests #9 / Add, edit and delete exception Add, Edit and delete Exception item "before each" hook for "should create exception item from Shared Exception List page and linked to a Rule" "before each" hook for "should create exception item from Shared Exception List page and linked to a Rule"
• [job] [logs] Serverless Security Investigations Cypress Tests #5 / Basic discover search and filter operations "before each" hook for "should change data when dataView is changed" "before each" hook for "should change data when dataView is changed"
• [job] [logs] Serverless Security Investigations Cypress Tests #5 / Basic discover search and filter operations should change data when dataView is changed should change data when dataView is changed
• [job] [logs] Serverless Security Cypress Tests #5 / Prebuilt rules Alerts rules, prebuilt rules "before each" hook for "Loads prebuilt rules" "before each" hook for "Loads prebuilt rules"
• [job] [logs] Serverless Observability Tests / serverless common UI Data View Management "before all" hook for "Scripted fields tab is missing"
• [job] [logs] Serverless Observability Examples Tests / serverless examples UI Unified Field List Examples Field stats field distribution "before all" hook for "should return an auto histogram for numbers and top values"
• [job] [logs] Serverless Security Investigations Cypress Tests #6 / Toggle full screen "before each" hook for "Should hide timeline header and tab list area" "before each" hook for "Should hide timeline header and tab list area"

Metrics [docs]

Unknown metric groups

References to deprecated APIs

id	before	after	diff
stackAlerts	63	62	-1

History

• 💔 Build #156565 failed b187f1f
• 💔 Build #156381 failed 1ed0a2b
• 💛 Build #154522 was flaky a9afaa6
• 💔 Build #154128 failed 3f6a3f8

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

cc @ersin-erdal