This documentation supports the 25.1 version of BMC Helix ITSM: Service Desk.To view an earlier version, select the version from the Product version menu.

Creating an incident request


Using BMC Helix ITSM, you can create tickets from the Create New menu. The Create New menu uses a more traditional, forms-based way to create tickets.

You can create the following tickets from the Create New menu:

  • Incidents (including security incidents)
  • Work orders
  • Knowledge articles
  • Change requests
  • Problem investigations
  • Known errors
  • Release
  • Broadcasts
  • Assets

To create an incident ticket from the Create New menu

Perform the following steps to create an incident ticket:

  1. On the main menu bar, select Create New >Incident.
  2. On the Create Incident screen, type the customer name, email ID, or corporate ID in the Customer field.
    The Company field is populated based on the customer that you select.
  3. (Optional) Enter your contact's name, email ID, or corporate ID in the Contact field.
    To create a customer or contact when you do not find a matching record, click the add newwo.PNGbutton next to the respective fields. In the dialog box that appears, enter the details and click Save.
    You must have one of the following permissions to create a customer or contact: Incident Submitter, Incident User, or Incident Master. Also, you must have the Contact Organization Admin or Contact Support Admin permission to access the Login ID field when creating a new customer or contact.
  4. Enter your search criteria for a template in the Incident Template field.
    (Optional)To view all available templates, click Browse.
    If you use an incident template to create an incident, the tasks or task groups in the incident template are automatically available in the created incident. 
  5. In the Select template pane, in the tier fields, type some keywords to search for the template.
  6. Select a template from the list, and click Select Template.

    Select Template.png

    The selected template auto fills a number of fields as per the information available in the template. The fields that are auto filled by a template depend on how the template is defined. All templates do not necessarily auto fill the same fields.

    Create Incident template.png

    You can change the selected template at any time. If you do, the auto filled fields are overridden with values specified by the new template.
  7. To add a screen capture or another file type to the ticket, click Attach Files.
  8. Select an option from the Incident Type drop-down menu.
    To create specific incidents related to security, select Security Incidents in the Incident Type list.
  9. Type some keywords in the Service field.
    If there are matches, a list of possible matches from services already in the system is displayed. Select a service from the list of suggestions.
  10. Type some keywords in the CI field.
    The system suggests a list of matches from which you can make a selection. 
  11. For assets that belong to another company within the multi-tenant environment, you can select Select categories from different company and set a different company.
    When you change the company used to select the categories, the system clears the Operational Category and Product Category fields, and you must select new operational and product categories.
    When you change the company, the change affects only the company that is used for operational and product categorizations.
    If you have selected the Security Incident option in the Incident Type list, make sure that for the required category, you have enabled the Security Incident option from the Application Administration Console in Mid Tier. For more information, see Configuring BMC Helix ITSM applications.

  12. If you keep the Assignee field blank, the ticket is automatically assigned to the correct group, based on the configured assignment rules.
    If you know which support group is best suited to resolve the incident, you can start typing in the Assignee group field and select a support group. 
    Click Browse to filter by support company, support organization, support group and assignee.
    (Optional) Alternatively, when AI-based support group prediction is enabled, if you do not know the relevant support group, you can use the following method to assign the incident:

    Action

    Result

    Click image-2024-12-18_11-22-2.pngto predict the best-suited support group for the incident based on the details of historical, closed incidents.

    If BMC Helix ITSM is configured to use AI-based support group prediction, the feature predicts and populates the Assignee group field with the relevant support group.
    To know more about the configuration, see Configuring assignments.
    After you save the incident, the Activity note area marks the incident is assigned to the support group by cognitive AI. 

    Important

    • image-2024-12-18_11-22-2.pngappears when AI-based support group prediction is enabled in BMC Helix ITSM.
    • If the relevant support group is not found, BMC Helix ITSM populates the Assignee group field by using the default assignment rule.
    • If you try to create an incident without entering the support group, AI automatically predicts the support group and assigns the incident to it.
  13. (Optional) If you select Security Incidents from the Incident Type list, in case of auto assignment, if the BMC Helix ITSM administrator has configured the required settings, the ticket is assigned to the security team.
    For more information, see Configuring-settings-for-managing-security-incidents.
  14. (Optional) To assign the ticket to yourself, click the Assign to me link.
    If you are part of a single support group, the ticket is assigned to you for that support group. 
    For more information, see Assigning-and-reassigning-an-incident-request. It is not mandatory to select a value for the Assignee field while creating an incident or resolving an incident.
  15. Add notes to the incident request in the Description field. 
  16. Click Save ticket. The system creates the ticket, routing the incident request to the support group for assignment. 

    Create New_Incident screen PV.png

    After you save the incident, click the Tasks tab. If the incident template has any related tasks or task groups, you can see them here.
    If you are aware of an existing ticket or some other entity that can help with the diagnosis and resolution of the ticket that you are currently working on, you can relate your ticket to that other ticket.


To view probable causes for an incident

Important

You can launch Probable Cause Analysis (PCA) only from the Progressive Web App (PWA) incident screens.

If your organization has a license of BMC Helix Service Monitoring (Powered by AIOps), you can launch Probable Cause Analysis (PCA) from the draft incident or view incident screen. This feature enables you to identify the possible root causes for the incident that you are working on.  

Probable cause analysis (PCA) is the process to determine the most likely causes of any issue in an infrastructure environment by correlating millions of monitoring data points and analyzing the relationship between infrastructure nodes and services. For more information, see Performing causal analysis of impacted services (BMC Helix Service Monitoring (Powered by AIOps) documentation).

When BMC Helix Service Monitoring (Powered by AIOps) is installed, the enableAIOpsintegration CCS parameter is auto-populated. For more information about this parameter, see Setting configuration parameters in BMC Helix ITSM.

  1. Open an incident from the Ticket Console or create an incident.
  2. From the draft incident screen or view incident screen, click Explore probable causes.

    PCA_edit.png

    This button is visible only when BMC Helix Service Monitoring (Powered by AIOps) is installed and licensed. 
    Depending on the service or CI associated with the incident, when you click Explore probable causes, one of the following actions are performed:
    • If the Service or CI field in the incident is populated, the Services page in the BMC Helix Service Monitoring (Powered by AIOps) console is displayed in a new browser tab.
    • If the incident does not have an associated service or CI, the Overview page in the BMC Helix Service Monitoring (Powered by AIOps) console is displayed in a new browser tab.

For more information, see Service health score and health timeline (BMC Helix Service Monitoring (Powered by AIOps) documentation).


Results when a user creates an incident in the Resolved status

The following table describes the assignment and status scenarios when a user creates an incident in the Resolved status:

Assignee specified

Support group specified

Ticket assigned to...

Support group assigned...

Status set as...

Yes

Yes

As specified by user

As specified by user

Resolved

No

No

Logged in user

User's default group

Resolved

No

Yes

Logged in user, if the user belongs to this support group

As specified by user

Resolved

No

Yes

User set by auto assignment rules if the logged in user does not belong to the specified support group

As specified by user

  • Assigned (The user is prompted that the ticket will be set to Assigned status. If user chooses to proceed, the status is set to Assigned, else the ticket is not saved)
  • An error is displayed (in classic Smart IT)


Creating an incident request record from the Smart Recorder screen

With the Smart Recorder, you can create incident requests and manage all needed information by using a single-field interface optimized for creating and handling tickets quickly and effectively. When you receive a call from a customer, you can immediately identify the people, assets, tickets, services, outages, and knowledge articles related to the customer's issue. Based on the captured details, you can create incident requests in Smart Recorder.

For more information, see Handling-tickets-dynamically-with-Smart-Recorder.


Instructions for classic interfaces

View instructions for classic Smart IT

If your organization has not opted in for PWA, the classic Smart IT screens are displayed.


To create an incident ticket from the Create New menu

Perform the following steps in the classic Smart IT screen:

  1. On the main menu bar, select Create New > Incident.
  2. On the Create Incident screen, enter a customer name in the Customer field and optionally a contact name in the Contact field.
  3. Type some keywords in the Template field. If your search does not bring any results, click Browse All Templates to open the template browser. Select a template from the Template Browser and then click Save

    Create Inc SmartIT.PNG

  4. The selected template auto-fills a number of fields on the screen, such as: Incident Title, Impact, Priority, Incident StatusOperational Categorization, and Product Categorization

    Create Inc SmartIT2.PNG

    The fields that are auto filled by a template depend on how the template is defined. All templates do not necessarily auto fill the same fields. You can change the selected template at any time. If you do, the auto filled fields are overridden with values specified by the new template.
    If you do not find an appropriate template, you can click Cancel in the Select Template panel and then manually type information into the remaining fields. You can then continue to work through the incident ticket as described in this example.
    The Summary field in Mid Tier is referred to as Incident Title in classic Smart IT.

  5. Select an option from the Incident Type drop-down menu.
    To create specific incidents related to security, select Security Incidents in the Incident Type list.
  6. Select a service in Affected Service field and an asset in the Affected Asset field.
    The CI field in Mid Tier is referred to as Affected Asset in classic Smart IT.
  7. If an asset belongs to another company within the multi-tenant environment, you can select Use a different company to select categories and select a different company in the Company drop-down list. When you change the company used to select the categories, the system clears the Operational Category and Product Category fields, and you must select new operational and the product categories.  
    When you change the company in this step, the change affects only the company that is used for Operational and Product categorizations. It does not change the Affected Company.
    If you have selected the Security Incident option in the Incident Type list, make sure that for the required category, you have enabled the Security Incident option from the Application Administration Console in Mid Tier. For more information, see Configuring BMC Helix ITSM applications.

  8. You can leave the Assignee selection at the default setting so that the ticket is assigned to the correct group, based on the configured assignment rules.
    Alternatively, you can clear the Auto-assign check box and manually select the support group that is best suited to resolve the incident.
    If you select Security Incidents from the Incident Type list, in case of auto assignment, if the classic Smart IT administrator has configured the required settings, the ticket will be assigned to the security team. For more information, see Configuring-settings-for-managing-security-incidents.
  9. (Optional) You can click the Assign to me link to assign the ticket to yourself. If you are a part of a single support group, the ticket is assigned to you for that support group. If you belong to multiple support groups, you must select one group in the Update Assignment pane to assign the ticket to self. 
    For more information, see Assigning-and-reassigning-an-incident-request
    It is not mandatory to select a value for the Assignee field while creating an incident or changing an incident status to Resolved.
  10. Add notes to the incident request in the Incident Description field. The Notes field in Mid Tier is referred to as Incident Description in classic Smart IT.
  11. Click Save Ticket. The system creates the ticket, routing the incident request to the support group for assignment. 

    Create Inc SmartIT3.PNG

    If you are creating an incident request and want to add a screen capture or another file type to the notes you are taking, click Add File and follow the onscreen instructions. If you are aware of an existing ticket or some other entity that can help with the diagnosis and resolution of the ticket that you are currently working on, you can relate your ticket to that other ticket.
    Depending on the needs of your organization, you might need to fill out other fields that are not immediately visible in the UI when you open it. If you click Set other optional fields, the system exposes those fields to view. For the auto assignment feature to work for incident tickets in classic Smart IT, you must select General from the Event list and create general events for the Incident Management application in Mid Tier.

    After you save the incident, click the Tasks tab. If the incident template has any related tasks or task groups, you can see them here.

View instructions for Mid Tier

To use a template to create an incident

When creating a new incident request record, you classify the incident and record user information, CI information, and a description of the incident. The key to this activity is the accuracy and completeness of the information recorded.

Best practice
To help ensure accuracy and completeness, we recommend that you use a template to help create the record. A template ensures consistency in the way information about the incident request is captured. When you use an incident template, the task or task group templates defined in the incident template are automatically available on the Tasks tab. A template can also set a relationship to a CI. Your administrator can define templates for commonly occurring incidents, as described in Configuring templates.

We do not recommend using CTRL+ALT+C to copy information from an incident.

  1. On the Incident Management console, click Create or Create for Company (in a Hub and Spoke environment).
  2. (Hub and spoke environment only) When asked to identify the company you are creating the record for, select the company from the list, and then click Create.

    The Incident form opens on the spoke server of the company you chose. Continue with the rest of this procedure.
    The record that you create for the selected company is created and submitted on the spoke server where the company is defined.

  3. In the Customer or Contact field on the new Incident Request form, enter the customer's or the contact's information as described in Adding-or-modifying-a-customer-profile.
  4. Check the rest of the customer information for accuracy.
  5. Enter the incident request details in the Notes field.
    • If you have added text to the Notes field before selecting a template, the Notes text is preserved and appended to the Notes text that is defined in the template.
    • The template overwrites the fields other than Notes.
  6. To view or add attachments, click the Browse Attachment image2018-5-17_14-35-26.pngicon of the Notes field.

    The administrator must enable this icon. For more details, see Applying system settings.

  7. In the Template box:

    • If you know the template name, type a few characters of the template name and then press Enter.
    • If you don't know the template name, click inside the Template field and then press Enter.
    • If you want to change your selection of a template, clear the text in the Template field and enter or select the template again.

      In this case, the text in the  Notes  field is preserved to avoid losing user-provided text. When you select and apply a new template, the Notes field is appended with new information. If the previous information in the  Notes  field is not relevant, manually clear this information from the  Notes  field.

    A list of templates available to your default support group appears in the Incident Template Selection form.

  8. From the hierarchical list, select the appropriate template and click Select.
  9. In the Summary field, enter a brief description.
  10. In the Service field, select the business service CI from menu. (You can also enter the name of the business service. After you enter the first three characters, a list of matching business services appears, from which you can select the required service.)
    The business services that appear in the menu have a relationship type of Used By, for the customer directly or to the customer's organization. Use this field if you are creating the incident against a business service. 
  11. If the incident request was caused by a CI, select the required CI. (You can also enter the required CI in the CI field. After you enter the first three characters, a list of matching business services are displayed from which you can select the required service.)

    This actions creates a relationship between the incident request record and the CI record. The CIs that appear in the menu are all the other CIs related to the customer that are not business service CIs. If the CI you are looking for does not appear in this list, click the button beside the CI field to open a CI search form from which you can search for all CIs. Use this field if you are creating the incident against a CI.

    • When you associate a CI to an incident request, the Service Desk application automatically maps the incident's resolution categorization to the CI's product categorization.
    • The CI field on the incident form refers to the causal CI that is the root cause of the incident. You can associate only one CI to this field. The CIs associated from the Relationship tab are related to the incident with relationship types such as Related toRestores, or Impacts. You can relate multiple CIs to the incident from the Relationship tab.
  12. Enter the Impact, Urgency, and Priority of the incident.
  13. Select the required type of incident from the Incident Type menu:
    • User Service Restoration—Used for typical service restoration requests (for example, a request to restore printing services). 
    • User Service Request—Used if the incident request is a simple question or a request for information (for example, a request for how-to information). 
    • Infrastructure Restoration—Used if the incident request is more focused on the restoration of infrastructure service. Typically, these types of incident requests are reported by system management tools (for example, if an incident is detected on a piece of network infrastructure by system monitoring software). 
    • Infrastructure Event—Used when a system management tool registers an event that does not require infrastructure restoration.
    • Security Incident—Used when you want to create security incidents. Typically, these incidents are assigned to the security team.
  14. (Optional) Add or delete the task or task groups available on the Tasks tab. 
    The fields are automatically populated only when the selected incident template has associated task or task group templates.

    In the Task Template form, if the value of the Status field of a task or task group is set to Potential or Inactive , on the new incident request form, the value of the  Status  field of the task or task group is automatically set to  Closed . For more information, see Managing-work-on-tickets-by-using-tasks.

  15. Complete the rest of the incident request form as appropriate.
    Use the Contact field to record the name of someone who reports an incident on behalf of someone else. For example, use this field if an administrative assistant is reporting an incident on behalf of an executive.
    When using the Contact field to record the name of the person reporting the incident, use the Customer field to record the name of the person experiencing the incident. This is especially important if the person experiencing the incident is registered as a VIP or as a sensitive customer. It also ensures that Incident Management displays the set of business CIs in the Service field selection list that are directly related to the person experiencing the incident, and so on.

    Tip

    If your organization uses categorizations (Operational Categorization and Product Categorization) to help assign incident requests, but none are supplied by the template, click the Categorization tab to open a dialog box where you can record this information. For detailed discussions of Operational Categorization, search for discussions about it at https://community.bmc.com.

  16. Click Save.

To create an incident request record without a template

  1. In the Navigation pane, select Functions > New Incident.
  2. (Hub and Spoke environment only) When asked to identify the company you are creating the record for, select the company from the list, and click Create.

    The Incident form opens on the spoke server of the company you chose (where it will be saved also).

  3. In the Customer or Contact field on the new Incident Request form, enter the customer's or the contact's information as described in Adding-or-modifying-a-customer-profile.
  4. (Optional) In the Notes  field, enter details about the incident.
  5. To see or add attachments, click the Browse Attachment image2018-5-17_14-35-26.pngicon of the Notes field.

    The administrator must enable this icon. For more details, seeApplying system settings.

  6. In the Summary field, enter a brief description.
  7. In the Service field, select the business service CI from menu. 
    You can also enter the name of the business service. After you enter the first three characters, a list of matching business services are displayed from which you can select the required service.
    The business services that appear in this menu have a relationship type of Used By for the customer directly or to the customer's organization. Use this field if you are creating the incident against a business service. If the business service CI is related with organization or the company, you must have access for the company.
  8. If the incident request was caused by a CI, select the required CI. 
    You can also enter the required CI in the CI field. After you enter the first three characters, a list of matching business services are displayed from which you can select the required service.
    This creates a relationship between the incident request record and the CI record. The CIs that appear in the menu are all the other CIs related to the customer that are not business service CIs. If the CI you are looking for does not appear in this list, click the button beside the CI field to open a CI search form, from which you can search for all CIs. Use this field if you are creating the incident against a CI.

    When entering CIs, remember these tips:

    • When you associate a CI to an incident request, the Service Desk application automatically maps the incident request's resolution product categorization to the CI's product categorization.
    • The CI field on the incident form refers to the causal CI that is the root cause of the incident. You can associate only one CI to this field. CIs associated from the Relationship tab are related to the incident with relationship types such as Related to, Restores, or Impacts. You can relate multiple CIs to the incident from the Relationship tab.
    • The type-ahead option for the Service and CI fields is set to three keystrokes by default. An administrator can change it according to your requirement. For more information, see Automatically completing menu entries.
  9. Select values from the Impact and Urgency lists.
  10. Select the required type of incident from the Incident Type menu:
    • User Service Restoration — Use this option for typical service restoration requests (for example, a request to restore printing services). 
    • User Service Request — Use this option if the incident request is a simple question or a request for information (for example, a request for how-to information). 
    • Infrastructure Restoration — Use this option if the incident request is more focused on the restoring an infrastructure service. Typically, system management tools report these types of incident requests (for example, if an incident is detected on a piece of network infrastructure by system monitoring software). 
    • Infrastructure Event — Use this option when a system management tool registers an event that does not require infrastructure restoration.
    • Security Incident — Use this option when you want to create security incidents. Typically, these incidents are assigned to the security team.
  11. Select the reported source:
    • Direct input — Use this source when IT support staff are creating an incident request directly, without input from a customer.
    • Email — Use this source to indicate an incident request was created from a customer's email message.
    • External Escalation — Use this source when the incident request comes from senior management or other VIP customers.
    • Fax — Use this source when the incident request is created from information gathered from a fax transmission.
    • Self-Service — This source indicates that the incident request originated from the Request Entry console of BMC Service Request Management or the Requester console in Mid Tier.
    • Systems Management — Use this source when the incident request is for any routine maintenance of the IT infrastructure.
    • Phone — Use this source when the incident request is created from information gathered over the phone.
    • Voice Mail — Use this source when the incident request is created from information that was left in a voice mail message.
    • Walk In — Use this source if your organization has a help desk that customers can visit in person and the customer has come to the help desk to report the incident or make the information request personally.
    • Web — Use this source if support staff created the incident request remotely, across the internet.
    • Other — Use this source if the source was something other than the choices in this list. 
    • BMC Impact Service Manager Event — This source indicates that the incident request was auto-generated by an integrated BMC application.
    • Chat — Use this source when the incident request is created from a chat conversation.
  12. Select the assigned group and the assignee.

    If you do not assign the incident, the incident is automatically assigned based on predefined assignment routing. If there is no appropriate predefined assignment routing, you are prompted to assign the incident when you click Save
    The names that appear in the list of assignees depends on the assigned group you select.

  13. If you use an external vendor, select the vendor's name from the list and, if used, the vendor's ticket number.
  14. Click Save.

To use the decision tree to ask scripted questions

A decision tree takes you step-by-step through a questionnaire. Based on your answers, the decision tree completes part of the form for a new incident request record. Each element in the decision tree displays a list of items. Your final selection completes part of the incident.

A manager or administrator can build decision trees. You can set up your preferences to use available decision trees whenever you start a new incident. For more information, see Modifying-your-profile-and-preferences.

The following video (1:54) shows how to use decision trees in Mid Tier to train new service desk staff how to process incident requests.

Disclaimer

Although the concepts and procedures presented in this video are correct, the user interfaces shown are not current.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*