I got this one to work in case this is helpful to anyone.
<Conditions>
<condition type="AlertType">CLASSIC</condition>
<condition type="AlertSubType">KPI_HT_BREACH</condition>
<condition type="Status">NEW</condition>
<condition type="Level">CRITICAL</condition>
<condition type="ResourceKind">VMWARE:VirtualMachine</condition>
<condition type="RootCauseTier">cpu:readyPct</condition>
</Conditions>