Create Incident Tickets
Creating an incident ticket is possible through the service portal and agent interface.
Depending on the role and authority of users in the system, they have access to different options for creating incidents:
- via the Self-Service Portal
- via the agent interface
- from a user query
- from a service request
Create an incident via the Self-Service Portal
This procedure is available to all end users.
To create an incident ticket, complete the following steps:
- Navigate to your Self-Service Portal main page.
- Click Report an incident and fill in the fields.
- Click Save.
Incident form fields
| Field | Mandatory | Description |
|---|---|---|
| Urgency | Y | Specify the urgency of the request. Typically, it is evaluated based on the time remaining until the incident impacts the business. See the Priority Matrix article to learn more. |
| Subject | Y | Add a brief description of the incident. If the subject length is over 100 characters, the characters exceeding this limit will be cut off. |
| Description | N | Add a detailed description of the incident. |
| Steps to reproduce | N | Specify the steps to reproduce the incident. |
The caller is also asked to contact the service desk by phone if their question is urgent. The phone number displayed here is specified in the itsm.notification.contact.phone system property.
You can attach some files by using the attachment window. To add files, drag them to the attachment window, or click Upload from your device and select them on your device.
You can track the work process on the Tickets page. To open the record of the incident, complete the following steps:
- In the header, navigate to Activities → Tickets.
- Click Incidents on the left.
- Check the state of the created incident.
You can also view more information about the incident by clicking its number.
Create an incident via the agent interface
Role required: ITSM_agent or admin.
To create an incident ticket, complete the following steps:
- Navigate to Incident Management → New.
- Fill in the fields.
- Click Save or Save and exit to apply the changes.
Incident form fields
The incident number has the INCXXXXXXX format and is populated automatically.
General tab
| Field | Mandatory | Description |
|---|---|---|
| State | N | Specify the work state and progress of the incident. If the incident is a child incident, the State field becomes read-only and is automatically populated with the value from the corresponding field of the parent infrastructure incident. |
| Resumption of work | Y | Indicate the date and time when the work on the incident must be resumed. The field appears when the incident is in the Postponed state. |
| External task | N | Specify the task to be done by the external company. The field appears when the incident is in the External processing state. If the field is populated, it is displayed in other states. |
| External company | N | Specify the company that works on the incident task externally. The field appears when the incident is in the External processing state. If the field is populated, it is displayed in other states. |
| Urgency | Y | Specify the urgency of the request. Typically, it is evaluated based on the time remaining until the incident impacts the business. See the Priority Matrix article to learn more. If the incident is a child incident, the Urgency field becomes read-only and is automatically populated with the value from the corresponding field of the parent infrastructure incident. |
| Event scope | Y | Specify how widespread the incident's impact has been on the system, infrastructure, or users, depending on your organizational specifics. Available options:
The field is displayed and used for determining the Impact based on the Impact Matrix if the itsm.itsm_incident.impact_matrix_is_enabled system property is set to true. The field can be edited by the itsm_agent users for incidents in any state except Closed. |
| Service outage extent | Y | Specify the extent of the unplanned reduction in the quality of the provided service. Available options:
The field is displayed and used for determining the Impact based on the Impact Matrix if the itsm.itsm_incident.impact_matrix_is_enabled system property is set to true. The field can be edited by the itsm_agent users for incidents in any state except Closed. |
| Impact | Y | Measure the impact caused by the incident on the business processes. The field is read-only if the itsm.itsm_incident.impact_matrix_is_enabled system property is set to true. In this case, the Impact is determined based on the Impact Matrix. If the incident is a child incident, the Impact field becomes read-only and is automatically populated with the value from the corresponding field of the parent infrastructure incident. |
| Priority | Y | Identifies the importance of the incident. This field is populated automatically based on the value of the Impact and Urgency fields. See the Priority Matrix article to learn more. If the incident is a child incident, the Priority field becomes read-only and is automatically populated with the value from the corresponding field of the parent infrastructure incident. |
| Assignment group | Y/N | Specify the group assigned to work on the incident. This field is non-mandatory if the Assigned user field is filled in or the State is In progress, Completed, or Closed. If the incident is a child incident, the Assignment group field becomes read-only and is automatically populated with the value from the corresponding field of the parent infrastructure incident. There is a dependency between the Assigned user and Assignment group fields. See the Auto Assignment article to learn more. |
| Assigned user | Y/N | Specify the user assigned to work on the incident. This field is non-mandatory if the Assignment group field is filled in and the State is not In progress, Completed, or Closed. To reassign a user or a group, use the Reassign button at the top right corner of the window. Assign another user or a group by clicking the magnifier icon next to the Assigned user field. As a result, the incident state changes to Assigned. If the incident is a child incident, the Assigned user field becomes read-only and is automatically populated with the value from the corresponding field of the parent infrastructure incident. There is a dependency between the Assigned user and Assignment group fields. See the Auto Assignment article to learn more. |
| Subject | Y | Add a brief description of the incident. After saving the record, this field is hidden. |
| Description | N | Add a detailed description of the incident. |
| Steps to reproduce | N | Specify the steps to reproduce the incident. |
| Screenshot | N | Upload screenshots supporting the incident, if any. |
| Related CIs | N | Specify the related configuration items affected by the incident. |
| Caller | Y | Specify the originator of the incident. |
| Company | N | Specify the company to which the incident is related. |
| Contact type | Y | Select the source from which the request is received. Available options:
When the record is saved, this field becomes read-only. |
| Service | Y | Specify the service affected by the incident. In the dropdown list, you can select from the services whose Service type is not Request. Clicking the icon opens the Services record picker, which has a filter with the corresponding condition. You can remove this condition to display all the services and select the one you need. |
| Service consumer | Y/N | Specify the organization unit that is the service consumer. Learn more in the Task article. The field is mandatory if the Service is specified. |
| Caller is consumer | N | Select this checkbox if the Caller is the Service consumer. Learn more in the Task article. |
| Attention required | N | Select this checkbox to notify the line manager of the assigned group or user. |
| Followers list | N | This field is populated automatically with a list of users who follow the incident for tracking the updates. It is read-only for any users without the ITSM_agent or admin roles. |
| SLA Breached | N | By default, the field is hidden. When the time set in the SLA indication expires, the value of the field changes from false to true. |
Activity Feed section
This section appears after the incident is saved.
| Field | Mandatory | Description |
|---|---|---|
| Discussion | N | Write a comment with additional information about the incident for the caller. |
| Work notes | N | Add any work notes that may be useful to you or other agents working on the incident. |
Related Records tab
Use this tab to create relationships between incidents and other types of records. See Create Records Related to Incidents to learn more.
Note that if the incident is a child incident, the information from the parent infrastructure incident is transferred to the corresponding fields of the General tab in the current incident form. Some related records from the parent incident are also automatically added to the corresponding fields of its child incidents.
Closure Information tab
The Closure Information tab appears and becomes mandatory when the incident state is Completed or Closed. See Process Incidents to learn more.
Related lists
The External Specification and Internal Specification related lists contain Knowledge Base articles with the same Service as in the incident, for quick access to the necessary instructions. Learn more in the Service Specifications article.
Access to the form fields
The read or update access to certain fields of a record can vary depending on the current user's roles.
- The users with the ITSM_agent or incident_manager roles, other than the creator of the incident or the assigned user, can:
- View the record.
- Submit Work notes and Discussion comments in all states of the incident other than Closed.
- Edit the State, Assignment group, and Assigned user field values in all states of the incident. The Work notes field becomes mandatory in this case.
- Edit the Followers list field value.
- The caller can:
- View the record, except for the Work notes field.
- Submit Discussion comments.