all my synthetic alerts goes in one Incident and not able to get any email alerts
That’s normal and expected behaviour.
By default, alert policies default to an incident preference of
By Policy - meaning that for any violations within that policy, there will only be a single incident, as the incident is rolled into a per policy set up.
You can configure this to be
By Condition Which will create a new incident every time a condition within your policy is violated. For each of those incidents you’ll get a new series of notifications.
There is a final option of
By Condition and Entity - which will create a new incident for every violation of every condition - and of every entity targeted by conditions. This is the most verbose in terms of alert notifications.
See more on that in our docs here:
Or in this great level up post: