ServiceNow integration current creates incidents directly in ServiceNow. Due to corporate standards we aren't allowed to directly create incidents. All monitoring integrations to ServiceNow have to create "events", which are then mappen within ServiceNow to incidents (where applicable).
Please consider adding an option to create events instead of incidents.