An 'Any Alert' as its name suggests will match any events that match the query
type any to match all limits the results you use a query filter as shown in the example below. You can simply cut and paste this example into your new Logit alert and then modify the elastic query to match the required events. Next, update the email address and test and run the alert.
name: "Any match alert example"
query: "agent.hostname:azure AND status: [500 TO 599]"
Read Logit's introduction to alerting
Learn more about ElastAlert rules: if you'd like to learn more about ElastAlert rules from the people that built it, check out their cheat sheet.