Auto Triage
13 min
role administrators platform saas only minimum version 2026 3 feature eligibility ivanti's capabilities are available to customers who have subscribed to premium or enterprise premium license to know your eligibility, reach out to your ivanti account manager prerequisites raise an it ticket to ivanti operations to set the itsmtcpredictions feature flag in configdb to unconditionally on by default, it is in disable state for further help, contact ivanti support https //www ivanti com/support itsmtcpredictions in unconditionally on state the auto triage feature functions through itsm ai services itsmtcpredictions in disable state the auto triage feature functions through ivanti neurons auto triage is an ai powered ticket classification feature that automatically predicts and populates incident fields such as category , subcategory , service , and team based on the information entered in the incident ticket it uses a multilingual ai model and can process tickets submitted in any supported language auto triage includes the following key processes training (configured by the administrator) select the input fields, output fields, and a historical training data range the system uses previously classified incident records to train the ai model and learn how to classify tickets after training is complete, deploy the model to start predicting values for new tickets prediction (for new and updated tickets) when a ticket is created or updated by an analyst, a self service user, or through email, the model analyzes the values entered in the configured input fields (in any supported language) and predicts the values for the configured output fields if the prediction confidence meets the configured threshold, the application automatically populates the predicted values and displays an ai recommended label analysts can review and modify the predicted values before saving the ticket you can control prediction behavior by configuring confidence thresholds, stop words, and whitelisted keywords analysts can also override ai recommended values when needed at least 10,000 records must remain after preprocessing, which removes incomplete or low quality records and rare labels with fewer than approximately 200 examples per class to help meet this requirement, start with approximately 15,000 to 20,000 resolved or closed incidents and include additional records for categories with limited data auto triage learns from your historical tickets and predicts and pre populates classification fields for new tickets in any supported language, while confidence thresholds and analyst override options help you maintain control over the predictions to learn more about auto triage use cases, refer to the using auto triage docid\ kuxykgtn4rucvsb4nxwzk enable auto triage log in to as an open the configuration console > build > ai configuration hub > ai & ml use the toggle to set auto triage to active configure auto triage log in to as an open the configuration console > build > ai configuration hub > ai & ml select the configure option beside the toggle button select add model enter the name , description , and choose a language the selected language is used for model identification only the model is multilingual, so it can process all supported languages, regardless of the language selected in this field set the threshold percentile value to determine how confident the model must be before it accepts a predicted value for an output field you can choose a value between 10% and 90%, in increments of 10% setting a lower value makes the model recommend output field values more frequently, although some recommendations may have lower confidence a higher value makes the model recommend output field values only when it is more confident that the prediction is correct this setting is configured separately for each output field and can be changed at any time without retraining the model set the historical training data range so that the ml model is trained using records from the specified date range the selected date range determines which historical records are exported to the training dataset the model does not apply any additional date based filtering during training because no date cutoff exists in the training process model training requires sufficient historical incident data at least 10,000 records must remain after preprocessing, which removes incomplete or low quality records and rare labels with fewer than approximately 200 examples per class to help meet this requirement, start with approximately 15,000 to 20,000 resolved or closed incidents and include additional records for categories with limited data your raw incident count does not need to be exactly 10,000 before training, the system cleans each ticket's text by removing html, links, ticket numbers, and punctuation, leaving only meaningful words a ticket that contains only placeholder text, such as resolved with an empty description, might be reduced to a single word and excluded because it does not provide enough information for the model to learn from because many tickets are reduced or removed during preprocessing, plan your raw dataset to be well above 10,000 records, typically 15,000 to 20,000 resolved or closed incidents example \<p>user cannot log in to vpn\</p> becomes user cannot log in vpn and is retained for training in contrast, a ticket containing only resolved becomes resolved , which provides insufficient information and might be excluded from the training dataset if training fails due to insufficient data, increase the historical training data range and retrain the model if increasing the date range does not help, consider consolidating rarely used categories into broader categories, where appropriate categories with very few examples (typically fewer than 200) are removed along with their associated tickets during preprocessing merging several low volume categories into a broader category can help retain more data for training the incident business object is selected by default in the select the business object dropdown under input fields , select the relevant fields to train the ml model when a service desk analyst or self service user enters values in the selected input fields of an incident record, the system predicts and populates the fields defined under output fields you can add up to four entries a field cannot be configured as both an input field and an output field use short to medium text or categorical fields, such as summary and description , as input fields avoid using lengthy or unstructured fields, such as notes , journal entries , html content , or attachment content , as they might affect model training under output fields , specify the fields that you want the ml model to predict and populate before training the ml model, ensure that the name of the fields selected under input fields and output fields matches your incident business object field names some organizations might have customized field names in their incident business object for example, sub category instead of subcategory field in such cases, you must create a field mapping so that the ml model can correctly recognize and use the custom field for more information on field name mapping, refer to viewing fields docid\ drawml4f1ib3loyspamcu you can configure up to four output fields supported output fields are category , subcategory , service , and team turn on enable whitelist & stopwords filtering to enable it under stop words , enter words or phrases that you want to exclude from the training data under whitelisted keywords , enter the imported words to prioritize during classification you can use a maximum of 20 keywords to both stop words and whitelisted keywords words separated by a space or comma are treated as separate keywords click save to save the model as draft or click save and train to train the model instantly click the deploy icon to deploy the trained model once the model status change to trained the model learns the fixed set of values available in its training data whenever you add, rename, or delete a picklist value used as an output field — category, service, subcategory, or team — you must retrain and redeploy the model until then, newly added values will not be predicted, and renamed or deleted values might still be recommended you can have multiple ai models with trained and draft status, whereas four models can be in the deployed status simultaneously, one for each output field service , category , subcategory , and team for example, if you deploy another model with the service field configured as an output field, the previously deployed model for the service output field changes its status to trained steps 16 to 20 are applicable only if you are configuring the feature for self service users these steps are not required for service desk analyst role as the ai prediction works automatically for service desk analyst role go to the configuration console > build > business objects , and open incident click quick actions tab, and then click graphical action designer create a quick action using the ai prediction notification block for more information, refer to ai prediction notification docid\ zzy cysw6un5eyi njkmk this quick action enables the ml model to predict and populate the values for the output fields that you configured in the ai configuration hub after saving the quick action, go to the business rules tab and expand triggered actions ensure the auto triage action toggle is on for out of the box customers, this toggle is on by default the upgraded customers must create this toggle using the + add trigger option for more information, refer to creating a triggered action for a business object docid 22z0oxtq zepbemdkszns the feature predicts output field values even when incident records are created through email configure the label when service desk analyst or self service user has auto populated the output fields, the application displays recommended field values in the mapped fields output fields and a green colored label indicating that the recommendations have been applied to display the label, do the following log in to as an open the configuration console > build > ai configuration hub > incident business object click forms tab and select the relevant form for example, incident customerownershipform or any other form you use modify the form with the following expression $("ai recommended category "+recommendedcategory) and $("ai recommended service "+recommendedservice) for more information on modifying the form, refer to using forms docid 5dd6rlsb123v5tlqc9wfn frequently asked questions how many incidents are required to train the model? a minimum of 10,000 filtered and pre processed records is required for best results, use approximately 15,000 to 20,000 resolved or closed incidents before training can new customers use auto triage without historical itsm data? no auto triage requires historical incident data to train the model a new tenant should have approximately 15,000 to 20,000 resolved or closed incidents before training does auto triage use only resolved incidents or also closed incidents for training? auto triage can use both resolved and closed incidents for training why did training fail even though i have more than 10,000 incidents? the minimum requirement of 10,000 records applies after preprocessing during preprocessing, the system cleans ticket text, removes records with insufficient content (for example, a ticket containing only resolved text with an empty description), and excludes categories with too few examples as a result, the number of records available for training can be significantly lower than the original incident count if training fails, increase the historical training data range and, where appropriate, consolidate low volume categories into broader categories before retraining
