Change the order of parameters in alert creation flyout

[mukeshelastic]

The current alert creation user experience starts with alert condition <operator> comparing to a threshold then a alert definition <pattern> and then time window i.e. When <operator> <threshold> log entries With <alert definition> Within last <time window>
Real example: When more than 75 long entries with log.level = error within last five minutes.

It is intuitive to define first the alert definition, then the alert condition comparing with a threshold followed by time window. So same example can be described as follows:
Real example: When the count of log entries with (log.level = error) is more than 75 within last five minutes.

[Kerry350]

Picking up alongside #72648.