Alarm which is ingested via RESTMon is not showing in OI. Bur it looks like alarm is generating SNOW ticket via ITSM channel.
Alarm fires in GCP, goes to RESTMon, is processed correctly in RESTMon and goes to OI SAAS, where you can not find Alarm, but it still matches the policy in OI SAAS and creates a ticket via ITSM where you see the ticket.
created two test policies in GCP that you are using to send incidents to the same RESTMon profile/schema combination.
Same ITSM channel policy, in the same tenant. Same RESTMon instance endpoint.
DX SAAS
We can see the alarm on the custom index but not in the all alarm index hence it is not showing on the OI UI.
The alarm which is not shown in OI UI is due to "location" field.
This field is supposed to be geo_point, how ever it is sent as a string.
Due to that it is not available in all alarms view.
Please use "locationString" for sending the location.