Alerts from AlertManager come in to ServiceNow as "INFO" no matter what severity was defined for each single alert.

[Zhang Zhao]

Attached below is my alertmanger.yaml file. The problem I ran into was that no matter what severity I defined in the alert, all events come in to ServiceNow as "info" from the webhook as an example down below. Any idea why???

global:

  resolve_timeout: 5m

receivers:

- name: prometheus-snow

  webhook_configs:

  - url: "https://"

    http_config:

      basic_auth:

        username: "xxx"

        password: "xxx"

route:

  group_by: ['alertname']

  receiver: prometheus-snow

[Brian Candler]

The screenshot appears to show an alert with annotation {"severity":"4"}.  I am guessing this label is being set in your alerting rules?  If not, what is setting it?  Is it a label from the original scrape?

Perhaps if you show the alerting rule which generates that alert, it will be clearer.