If you are in CA Spectrum 10.2.1 & CA UIM 8.51 + spectrumgtw probe 8.60, actually the spectrumgtw probe sends the Event Alarm Request via restful.
The <varbind id="101">3</varbind> determines the Alarm Severity in Spectrum side. 3 means Critical Alarm.
Here an example of spectrumgtw probe log file in debug level 5:
Apr 24 2017 17:46:52,988 [twScheduler_Worker-9] DEBUG SpectrumAlarmPush - Sending Event Alarm Request
Apr 24 2017 17:46:52,990 [twScheduler_Worker-9] DEBUG Connection - POST(ing): http://oneclick:80/spectrum/restful/eventalarm with payload object:
<?xml version="1.0" encoding="UTF-8"?><event-alarm-request xmlns="http://www.ca.com/spectrum/restful/schema/request">
<create-events-list throttlesize="2500">
<create-event>
<varbind id="1">server_01</varbind>
<varbind id="0x0012b4c">Average (1 samples) disk free on /partition/server_01/root/app/temp is now 2%, which is below the error threshold (5%) out of total size 32.0 GB</varbind>
<varbind id="8">10.100.51.229</varbind>
<varbind id="101">3</varbind>
<varbind id="104">disk//partition/server_01/root/app/temp</varbind>
<varbind id="105">cdm</varbind>
<varbind id="106">ATM</varbind>
<varbind id="113">1.1:3</varbind>
<varbind id="0x13344">PX20268201-19656</varbind>
<varbind id="0x13342">2</varbind>
<varbind id="0x13343">3</varbind>
</create-event>
</create-events-list>
</event-alarm-request>