format
higher severity
more test cases
fix a bug that will lose alarm events

if alarm parser has no alarms, we still treat it as normal alarm