Use Real Time Monitoring to Parse for Missing Events in Event Log

An application we support writes 5 events to the Application event log when it makes a connection. However, it does not log an error if there is an issue. It will simply not write one of the 5 events. Is it possible to create a real-time rule to parse the log and send an alert if this happens?

So event IDs are written in this order on a valid connection: 6, 8, 10, 9, 11

However on a failed connection we will only see 6, 8, 9, 11.

Can a rule be set to monitor these event IDs and alert if the 10 is missing? It seemed the correlate events might be the way to go, but not seeing a way to configure.