{ "name": "Triage Auto - Main Branch", "nodes": [ { "parameters": { "model": { "__rl": true, "value": "gpt-5.2", "mode": "list", "cachedResultName": "gpt-5.2" }, "options": { "timeout": 180000 } }, "type": "@n8n/n8n-nodes-langchain.lmChatOpenAi", "typeVersion": 1.2, "position": [ 1376, 496 ], "id": "0affd041-cdf2-44b6-9223-0ec952a0ba33", "name": "OpenAI Chat Model", "credentials": { "openAiApi": { "id": "38HvRPpoNqRs3WND", "name": "OpenAi Dan" } } }, { "parameters": { "resource": "ticket", "operation": "update", "id": "={{ $json.id }}", "fieldsToMap": { "mappingMode": "defineBelow", "value": { "title": "={{ $json[\"title\"] }}", "description": "={{ $json[\"description\"] }}", "issueType": "={{ $json[\"issueType\"] }}", "priority": "={{ $json[\"priority\"] }}", "queueID": "={{ $json[\"queueID\"] }}", "status": "={{ $json[\"status\"] }}", "subIssueType": "={{ $json[\"subIssueType\"] }}", "ticketType": "={{ $json[\"ticketType\"] }}", "ticketCategory": "={{ $json[\"ticketCategory\"] }}" }, "matchingColumns": [], "schema": [ { "id": "assignedResourceID", "displayName": "Assigned resource ID (Reference: Resource | assignedResourceID)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Adam Bryer", "value": "30861537", "description": "" }, { "name": "Addigy API", "value": "30861552", "description": "" }, { "name": "Anthony Bonante", "value": "30861472", "description": "" }, { "name": "Autotask Administrator", "value": "4", "description": "" }, { "name": "Bill Croop", "value": "30861457", "description": "" }, { "name": "Brad Fortney", "value": "30861483", "description": "" }, { "name": "Casey Roush", "value": "30861478", "description": "" }, { "name": "chat test", "value": "30861548", "description": "" }, { "name": "Chris McConnell", "value": "30861561", "description": "" }, { "name": "Collin Imler", "value": "30861443", "description": "" }, { "name": "Connect Booster", "value": "30861526", "description": "" }, { "name": "Cory Houck", "value": "30861463", "description": "" }, { "name": "Crewhu Bot", "value": "30861496", "description": "" }, { "name": "Dan Bucci", "value": "29823085", "description": "" }, { "name": "Darrius Jones", "value": "30861543", "description": "" }, { "name": "Dash Board", "value": "30861460", "description": "" }, { "name": "Datto RMM", "value": "30861455", "description": "" }, { "name": "David Bauer", "value": "30861549", "description": "" }, { "name": "Delmar Insights", "value": "30861534", "description": "" }, { "name": "DeskDirector Integrator", "value": "30861501", "description": "" }, { "name": "Development N8N", "value": "30861571", "description": "" }, { "name": "Evan Life", "value": "30861544", "description": "" }, { "name": "Garrett Reihner", "value": "30861570", "description": "" }, { "name": "Gary Hightower", "value": "30861458", "description": "" }, { "name": "Heather Collins", "value": "30861568", "description": "" }, { "name": "Huntress Labs", "value": "30861538", "description": "" }, { "name": "Jake Hammel", "value": "30861450", "description": "" }, { "name": "James Hubbard", "value": "30861536", "description": "" }, { "name": "James Meier", "value": "30861471", "description": "" }, { "name": "Jeremy Johnston", "value": "29682788", "description": "" }, { "name": "John Stvartak", "value": "30861444", "description": "" }, { "name": "Jordan Goff", "value": "30861491", "description": "" }, { "name": "Jordan Turk", "value": "30861559", "description": "" }, { "name": "Joshua Mitchell", "value": "30861540", "description": "" }, { "name": "Justin Arnold", "value": "30861523", "description": "" }, { "name": "Kayla Lantz", "value": "30861507", "description": "" }, { "name": "Lauren Baczuk", "value": "30861505", "description": "" }, { "name": "Lifecycle Insights", "value": "30861551", "description": "" }, { "name": "Lorentz Hinrichsen", "value": "29683311", "description": "" }, { "name": "Miguel Vasquez", "value": "30861541", "description": "" }, { "name": "Mike Oberdick", "value": "30861560", "description": "" }, { "name": "Mission Control", "value": "30861459", "description": "" }, { "name": "MissionControl API", "value": "30861530", "description": "" }, { "name": "n8n api", "value": "30861569", "description": "" }, { "name": "passportal sync", "value": "30861557", "description": "" }, { "name": "Pax8 API", "value": "30861528", "description": "" }, { "name": "Quickbooks Online", "value": "30861532", "description": "" }, { "name": "QuoteWerks Sales", "value": "30861531", "description": "" }, { "name": "Rewst Automation", "value": "30861573", "description": "" }, { "name": "RMM Tool", "value": "29764294", "description": "" }, { "name": "Ryan Day", "value": "30861510", "description": "" }, { "name": "Sean Glenn", "value": "30861545", "description": "" }, { "name": "SecureBreachNow API", "value": "30861554", "description": "" }, { "name": "Steve Cianflone", "value": "30861476", "description": "" }, { "name": "TimeZest API", "value": "30861529", "description": "" }, { "name": "Tom Carlin", "value": "30861456", "description": "" }, { "name": "Tony Feerst", "value": "29775118", "description": "" }, { "name": "Warranty Master", "value": "30861475", "description": "" }, { "name": "Wulf Automation", "value": "30861533", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "assignedResourceRoleID", "displayName": "Assigned resource role ID (Integer | assignedResourceRoleID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "billingCodeID", "displayName": "Billing code ID (Reference: BillingCode | billingCodeID)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Administration Dept Meeting (29792118)", "value": "29792118", "description": "" }, { "name": "Bench Work (29682870)", "value": "29682870", "description": "" }, { "name": "Block Hours (29720332)", "value": "29720332", "description": "" }, { "name": "Business Development (29792079)", "value": "29792079", "description": "" }, { "name": "Change Orders (5)", "value": "5", "description": "" }, { "name": "Client Onboarding (29792114)", "value": "29792114", "description": "" }, { "name": "Client Relations and Sales (29792101)", "value": "29792101", "description": "" }, { "name": "Client Success (29682860)", "value": "29682860", "description": "" }, { "name": "Client Success Dept Meeting (29792121)", "value": "29792121", "description": "" }, { "name": "Client Success Mgmt (Admin) (29792122)", "value": "29792122", "description": "" }, { "name": "Client Supplies (29792125)", "value": "29792125", "description": "" }, { "name": "Co-Managed IT Resource (29792072)", "value": "29792072", "description": "" }, { "name": "Company Morning Huddle (29792098)", "value": "29792098", "description": "" }, { "name": "Cyber Security (29792084)", "value": "29792084", "description": "" }, { "name": "Data Center Cloud (29792087)", "value": "29792087", "description": "" }, { "name": "Datto Cloud (29792096)", "value": "29792096", "description": "" }, { "name": "Discount (-1)", "value": "-1", "description": "" }, { "name": "Discount Non-Taxable (-2)", "value": "-2", "description": "" }, { "name": "Domain Name (29694963)", "value": "29694963", "description": "" }, { "name": "Entertainment Expense (3)", "value": "3", "description": "" }, { "name": "Escalation (29792117)", "value": "29792117", "description": "" }, { "name": "Financial and Accounting (Admin) (29792103)", "value": "29792103", "description": "" }, { "name": "HaaS (29792106)", "value": "29792106", "description": "" }, { "name": "Hardware - Infrastructure (29792094)", "value": "29792094", "description": "" }, { "name": "Hardware (29682871)", "value": "29682871", "description": "" }, { "name": "Hardware (29792065)", "value": "29792065", "description": "" }, { "name": "Holiday (91208)", "value": "91208", "description": "" }, { "name": "Hourly Payroll (29792113)", "value": "29792113", "description": "" }, { "name": "Human Resources (Admin) (29682781)", "value": "29682781", "description": "" }, { "name": "Innovation and Technology (29792112)", "value": "29792112", "description": "" }, { "name": "Inventory Management (29792105)", "value": "29792105", "description": "" }, { "name": "Labor (29682918)", "value": "29682918", "description": "" }, { "name": "Labor (29702246)", "value": "29702246", "description": "" }, { "name": "Labor (29792064)", "value": "29792064", "description": "" }, { "name": "Legal and Compliance (Admin) (29792110)", "value": "29792110", "description": "" }, { "name": "Managed IT & Backup (29792083)", "value": "29792083", "description": "" }, { "name": "Marketing (Admin) (29792100)", "value": "29792100", "description": "" }, { "name": "Marketing & Branding (29792109)", "value": "29792109", "description": "" }, { "name": "Mileage (2)", "value": "2", "description": "" }, { "name": "Milestone (29682913)", "value": "29682913", "description": "" }, { "name": "Miscellaneous (29682783)", "value": "29682783", "description": "" }, { "name": "Monitoring Services (29683277)", "value": "29683277", "description": "" }, { "name": "New Business Development (Admin) (29792099)", "value": "29792099", "description": "" }, { "name": "Nextiva Services (29792068)", "value": "29792068", "description": "" }, { "name": "NOC Support (29792060)", "value": "29792060", "description": "" }, { "name": "Non-Taxable Products (29682839)", "value": "29682839", "description": "" }, { "name": "O365 Cloud (29792085)", "value": "29792085", "description": "" }, { "name": "O365 Support (29792082)", "value": "29792082", "description": "" }, { "name": "Office Administration (29682808)", "value": "29682808", "description": "" }, { "name": "Office Administration (29792102)", "value": "29792102", "description": "" }, { "name": "On-site Support (29780565)", "value": "29780565", "description": "" }, { "name": "Operations Management (29792077)", "value": "29792077", "description": "" }, { "name": "Out of Scope (29792071)", "value": "29792071", "description": "" }, { "name": "Parking (29765131)", "value": "29765131", "description": "" }, { "name": "Peer Group(s) (29792115)", "value": "29792115", "description": "" }, { "name": "Personal Development and Leadership (29792111)", "value": "29792111", "description": "" }, { "name": "Personal Time (91209)", "value": "91209", "description": "" }, { "name": "Pro Services Dept Meeting (29792123)", "value": "29792123", "description": "" }, { "name": "Pro Services Mgmt (Admin) (29792124)", "value": "29792124", "description": "" }, { "name": "Procurement (29792075)", "value": "29792075", "description": "" }, { "name": "Procurement & Fulfillment (Admin) (29792104)", "value": "29792104", "description": "" }, { "name": "Professional Service - PC Setup (29792130)", "value": "29792130", "description": "" }, { "name": "Project Labor (29792088)", "value": "29792088", "description": "" }, { "name": "Projects (29682915)", "value": "29682915", "description": "" }, { "name": "Quote Manager Temp (29792107)", "value": "29792107", "description": "" }, { "name": "Recurring Services (29682912)", "value": "29682912", "description": "" }, { "name": "Reimbursed Expense (29792093)", "value": "29792093", "description": "" }, { "name": "Remote Support (29780571)", "value": "29780571", "description": "" }, { "name": "Retainer Purchase (29720333)", "value": "29720333", "description": "" }, { "name": "RMA (29792074)", "value": "29792074", "description": "" }, { "name": "Service Delivery Dept Meeting (29792119)", "value": "29792119", "description": "" }, { "name": "Service Delivery Mgmt (Admin) (29792120)", "value": "29792120", "description": "" }, { "name": "Shipping - FEDEX (29739200)", "value": "29739200", "description": "" }, { "name": "Sick Time (91207)", "value": "91207", "description": "" }, { "name": "SOC (Admin) (29792127)", "value": "29792127", "description": "" }, { "name": "SOC Support (29792081)", "value": "29792081", "description": "" }, { "name": "Software (29682872)", "value": "29682872", "description": "" }, { "name": "Software (29792066)", "value": "29792066", "description": "" }, { "name": "Software Licenses (29684861)", "value": "29684861", "description": "" }, { "name": "Strategic Planning and Vision (29792108)", "value": "29792108", "description": "" }, { "name": "SubContractor (29792092)", "value": "29792092", "description": "" }, { "name": "Subscription (29682919)", "value": "29682919", "description": "" }, { "name": "System Build & Config (29792129)", "value": "29792129", "description": "" }, { "name": "T&M Labor (29792089)", "value": "29792089", "description": "" }, { "name": "Tasks (29682916)", "value": "29682916", "description": "" }, { "name": "Taxable Products (29682840)", "value": "29682840", "description": "" }, { "name": "Taxes from Autotask (29682914)", "value": "29682914", "description": "" }, { "name": "Ticket Purchase (29720334)", "value": "29720334", "description": "" }, { "name": "Ticket Triage (29792116)", "value": "29792116", "description": "" }, { "name": "Tickets (29682917)", "value": "29682917", "description": "" }, { "name": "Training (29792126)", "value": "29792126", "description": "" }, { "name": "Travel Charge (29682782)", "value": "29682782", "description": "" }, { "name": "Travel Time (27192)", "value": "27192", "description": "" }, { "name": "Travel Time (29792067)", "value": "29792067", "description": "" }, { "name": "Vacation (91206)", "value": "91206", "description": "" }, { "name": "VAR Cloud Tax Exempt (29792128)", "value": "29792128", "description": "" }, { "name": "VAR Cloud Taxable (29792086)", "value": "29792086", "description": "" }, { "name": "Web Hosting (29792073)", "value": "29792073", "description": "" }, { "name": "Workstation (29695008)", "value": "29695008", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "changeApprovalBoard", "displayName": "Change approval board (Picklist | changeApprovalBoard)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Software Request CAB", "value": "3", "description": "" }, { "name": "Wulf CAB", "value": "1", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "changeApprovalStatus", "displayName": "Change approval status (Picklist | changeApprovalStatus)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Approved", "value": "5", "description": "" }, { "name": "Assigned", "value": "2", "description": "" }, { "name": "Not Assigned", "value": "1", "description": "" }, { "name": "Partially Approved", "value": "4", "description": "" }, { "name": "Rejected", "value": "6", "description": "" }, { "name": "Requested", "value": "3", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "changeApprovalType", "displayName": "Change approval type (Picklist | changeApprovalType)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "All approvers must approve", "value": "1", "description": "" }, { "name": "One approver must approve", "value": "2", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "changeInfoField1", "displayName": "Change info field1 (String | changeInfoField1)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "changeInfoField2", "displayName": "Change info field2 (String | changeInfoField2)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "changeInfoField3", "displayName": "Change info field3 (String | changeInfoField3)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "changeInfoField4", "displayName": "Change info field4 (String | changeInfoField4)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "changeInfoField5", "displayName": "Change info field5 (String | changeInfoField5)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "companyID", "displayName": "Company ID (Integer | companyID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "companyLocationID", "displayName": "Company location ID (Integer | companyLocationID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "configurationItemID", "displayName": "Configuration item ID (Integer | configurationItemID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "contactID", "displayName": "Contact ID (Integer | contactID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "contractID", "displayName": "Contract ID (Integer | contractID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "contractServiceBundleID", "displayName": "Contract service bundle ID (Long | contractServiceBundleID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "contractServiceID", "displayName": "Contract service ID (Long | contractServiceID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "createdByContactID", "displayName": "Created by contact ID (Integer | createdByContactID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "description", "displayName": "Description (String | description)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": false }, { "id": "dueDateTime", "displayName": "Due date time (Datetime | dueDateTime)", "type": "dateTime", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "estimatedHours", "displayName": "Estimated hours (Decimal | estimatedHours)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "externalID", "displayName": "External ID (String | externalID)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "issueType", "displayName": "Issue type (Picklist | issueType)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "24-Hour Emergency Support", "value": "36", "description": "" }, { "name": "Active Directory & Accounts", "value": "76", "description": "" }, { "name": "Backups", "value": "38", "description": "" }, { "name": "Blumira Monitoring", "value": "83", "description": "" }, { "name": "Centralized Services", "value": "22", "description": "" }, { "name": "Client Success", "value": "28", "description": "" }, { "name": "Collaboration (Video, Voice & Chat)", "value": "42", "description": "" }, { "name": "Datto RMM Monitoring", "value": "57", "description": "" }, { "name": "Decommission", "value": "75", "description": "" }, { "name": "Deployment", "value": "45", "description": "" }, { "name": "DUO Monitoring", "value": "77", "description": "" }, { "name": "Email", "value": "34", "description": "" }, { "name": "Epicor", "value": "66", "description": "" }, { "name": "Hardware", "value": "31", "description": "" }, { "name": "Home Support", "value": "65", "description": "" }, { "name": "Human Resources", "value": "55", "description": "" }, { "name": "Huntress Monitoring", "value": "78", "description": "" }, { "name": "M365 Monitoring", "value": "79", "description": "" }, { "name": "MAC", "value": "21", "description": "" }, { "name": "MES", "value": "68", "description": "" }, { "name": "MES AccPac", "value": "72", "description": "" }, { "name": "MES Data Collection", "value": "71", "description": "" }, { "name": "MES IT Department", "value": "74", "description": "" }, { "name": "MES PowerBI", "value": "73", "description": "" }, { "name": "MES Preactor", "value": "70", "description": "" }, { "name": "MES Server", "value": "69", "description": "" }, { "name": "Networking", "value": "25", "description": "" }, { "name": "Office Administration", "value": "43", "description": "" }, { "name": "Peripheral Connectivity", "value": "51", "description": "" }, { "name": "Ransomware Monitoring", "value": "85", "description": "" }, { "name": "Reactive", "value": "20", "description": "" }, { "name": "Remote Access", "value": "63", "description": "" }, { "name": "Sales", "value": "26", "description": "" }, { "name": "Security", "value": "59", "description": "" }, { "name": "SentinelOne Monitoring", "value": "80", "description": "" }, { "name": "Server", "value": "30", "description": "" }, { "name": "Software", "value": "46", "description": "" }, { "name": "Sophos Monitoring", "value": "81", "description": "" }, { "name": "Technology Alignment", "value": "84", "description": "" }, { "name": "Thrasher Internal", "value": "67", "description": "" }, { "name": "Vendor Support", "value": "61", "description": "" }, { "name": "Zoom Monitoring", "value": "82", "description": "" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "isVisibleToComanaged", "displayName": "Is visible to comanaged (Boolean | isVisibleToComanaged)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Yes", "value": "true", "description": "True/Yes" }, { "name": "No", "value": "false", "description": "False/No" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "monitorID", "displayName": "Monitor ID (Long | monitorID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "monitorTypeID", "displayName": "Monitor type ID (Picklist | monitorTypeID)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "AntivirusMonitor", "value": "23", "description": "" }, { "name": "BackupMonitor", "value": "13", "description": "" }, { "name": "ComponentMonitor", "value": "4", "description": "" }, { "name": "CPUMonitor", "value": "2", "description": "" }, { "name": "DiskUsageMonitor", "value": "10", "description": "" }, { "name": "EventLogMonitor", "value": "7", "description": "" }, { "name": "FileFolderSizeMonitor", "value": "11", "description": "" }, { "name": "HardwareMonitor", "value": "19", "description": "" }, { "name": "MemoryMonitor", "value": "3", "description": "" }, { "name": "NetworkMonitor", "value": "16", "description": "" }, { "name": "NetworkOfflineMonitor", "value": "17", "description": "" }, { "name": "OnlineStatusMonitor", "value": "1", "description": "" }, { "name": "PatchMonitor", "value": "20", "description": "" }, { "name": "PrinterStatusMonitor", "value": "14", "description": "" }, { "name": "ProcessMonitor", "value": "5", "description": "" }, { "name": "RansomwareMonitor", "value": "24", "description": "" }, { "name": "SecurityCenterMonitor", "value": "9", "description": "" }, { "name": "SecurityManagementMonitor", "value": "12", "description": "" }, { "name": "ServiceMonitor", "value": "6", "description": "" }, { "name": "SnmpMonitor", "value": "15", "description": "" }, { "name": "SoftwareMonitor", "value": "8", "description": "" }, { "name": "TemperatureSensorMonitor", "value": "18", "description": "" }, { "name": "ThreatDetection", "value": "25", "description": "" }, { "name": "WindowsPerformanceMonitor", "value": "21", "description": "" }, { "name": "WmiMonitor", "value": "22", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "opportunityID", "displayName": "Opportunity ID (Integer | opportunityID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "organizationalLevelAssociationID", "displayName": "Organizational level association ID (Integer | organizationalLevelAssociationID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "priority", "displayName": "Priority (Picklist | priority)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Critical", "value": "4", "description": "" }, { "name": "Fast Track", "value": "11", "description": "" }, { "name": "High", "value": "6", "description": "" }, { "name": "Installation", "value": "10", "description": "" }, { "name": "Major Service", "value": "9", "description": "" }, { "name": "Medium", "value": "2", "description": "" }, { "name": "Minor Service", "value": "8", "description": "" }, { "name": "Security Event", "value": "7", "description": "" }, { "name": "Standard", "value": "3", "description": "" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "problemTicketId", "displayName": "Problem ticket id (Integer | problemTicketId)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "projectID", "displayName": "Project ID (Integer | projectID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "purchaseOrderNumber", "displayName": "Purchase order number (String | purchaseOrderNumber)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "queueID", "displayName": "Queue ID (Picklist | queueID)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Client Success", "value": "29749490", "description": "" }, { "name": "Client Triage", "value": "5", "description": "" }, { "name": "Deployment", "value": "29853700", "description": "" }, { "name": "Follow Up", "value": "29853695", "description": "" }, { "name": "Glunt Help Desk", "value": "29853714", "description": "" }, { "name": "IT Operations", "value": "29853701", "description": "" }, { "name": "LEC Network Operations Center", "value": "29853754", "description": "" }, { "name": "LEC Security Operations Center", "value": "29853755", "description": "" }, { "name": "LEC Service Desk", "value": "29853753", "description": "" }, { "name": "Level 1 Support", "value": "29682833", "description": "" }, { "name": "Level 2 Support", "value": "29682969", "description": "" }, { "name": "Level 3 Support", "value": "29703428", "description": "" }, { "name": "Mission Control", "value": "29853699", "description": "" }, { "name": "Monitoring Alert", "value": "8", "description": "" }, { "name": "Operations Triage", "value": "29832283", "description": "" }, { "name": "PER Network Operations Center", "value": "29853751", "description": "" }, { "name": "PER Security Operations Center", "value": "29853752", "description": "" }, { "name": "PER Service Desk", "value": "29853750", "description": "" }, { "name": "Post Sale", "value": "6", "description": "" }, { "name": "Premier Automation Help Desk", "value": "29853706", "description": "" }, { "name": "Project Delivery", "value": "29853698", "description": "" }, { "name": "Purchasing", "value": "29853727", "description": "" }, { "name": "Sales Order", "value": "29853766", "description": "" }, { "name": "Subcontractor", "value": "29853741", "description": "" }, { "name": "TaskFire", "value": "29780304", "description": "" }, { "name": "TNT Pizza Help Desk", "value": "29853719", "description": "" }, { "name": "Trivium Packaging - Help Desk", "value": "29853697", "description": "" }, { "name": "Trivium Packaging - MES", "value": "29853731", "description": "" }, { "name": "TTG Change Mgmt", "value": "29853740", "description": "" }, { "name": "TTG Finance", "value": "29853723", "description": "" }, { "name": "TTG Help Desk", "value": "29853710", "description": "" }, { "name": "TTG Machines", "value": "29853720", "description": "" }, { "name": "TTG NetOps", "value": "29853721", "description": "" }, { "name": "TTG New User Access", "value": "29853728", "description": "" }, { "name": "TTG Remote", "value": "29853726", "description": "" }, { "name": "TTG Safety", "value": "29853724", "description": "" }, { "name": "TTG Security", "value": "29853738", "description": "" }, { "name": "TTG Term User Access", "value": "29853729", "description": "" }, { "name": "VCF Network Operations", "value": "29853757", "description": "" }, { "name": "VCF Security Operations Center", "value": "29853758", "description": "" }, { "name": "VCF Service Desk", "value": "29853756", "description": "" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "resolution", "displayName": "Resolution (String | resolution)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "rmaStatus", "displayName": "Rma status (Picklist | rmaStatus)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Authorized", "value": "2", "description": "" }, { "name": "Denied", "value": "3", "description": "" }, { "name": "Finished", "value": "9", "description": "" }, { "name": "Finished (Not Returned)", "value": "10", "description": "" }, { "name": "In Progress", "value": "8", "description": "" }, { "name": "On Hold", "value": "5", "description": "" }, { "name": "Open", "value": "4", "description": "" }, { "name": "Requested", "value": "1", "description": "" }, { "name": "Waiting for Customer", "value": "7", "description": "" }, { "name": "Withdrawn", "value": "6", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "rmaType", "displayName": "Rma type (Picklist | rmaType)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Repair", "value": "2", "description": "" }, { "name": "Replace", "value": "3", "description": "" }, { "name": "Return", "value": "1", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "serviceLevelAgreementID", "displayName": "Service level agreement ID (Picklist | serviceLevelAgreementID)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Default", "value": "1", "description": "" }, { "name": "Purchasing", "value": "15", "description": "" }, { "name": "Service Delivery - Gold", "value": "17", "description": "" }, { "name": "Service Delivery - Silver", "value": "18", "description": "" }, { "name": "Thrasher HD SLA", "value": "14", "description": "" }, { "name": "Wulf Inside Sales SLA", "value": "12", "description": "" }, { "name": "Wulf Ops Center SLA", "value": "11", "description": "" }, { "name": "Wulf Procurement SLA", "value": "16", "description": "" }, { "name": "Wulf Response 24x7x365", "value": "10", "description": "" }, { "name": "Wulf Service Desk SLA", "value": "9", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "source", "displayName": "Source (Picklist | source)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Autotask Portal", "value": "5", "description": "" }, { "name": "AWS Cloud Watch (email)", "value": "37", "description": "" }, { "name": "Blumira SIEM", "value": "36", "description": "" }, { "name": "Client Portal", "value": "-1", "description": "" }, { "name": "Datto RMM (API)", "value": "8", "description": "" }, { "name": "Desk Director", "value": "21", "description": "" }, { "name": "DUO (API)", "value": "32", "description": "" }, { "name": "Email", "value": "4", "description": "" }, { "name": "Huntress (email)", "value": "31", "description": "" }, { "name": "In Person/Onsite", "value": "6", "description": "" }, { "name": "Insourced", "value": "-2", "description": "" }, { "name": "Lifecycle Insights", "value": "30", "description": "" }, { "name": "M365 (email)", "value": "33", "description": "" }, { "name": "Other", "value": "1", "description": "" }, { "name": "Phone", "value": "2", "description": "" }, { "name": "Reactive Ticket", "value": "29", "description": "" }, { "name": "Recurring", "value": "22", "description": "" }, { "name": "RMM Tool", "value": "17", "description": "" }, { "name": "RocketCyber Alert", "value": "24", "description": "" }, { "name": "SentinelOne (email)", "value": "34", "description": "" }, { "name": "Sophos (email)", "value": "35", "description": "" }, { "name": "Text Message", "value": "18", "description": "" }, { "name": "Zoom (email)", "value": "27", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "status", "displayName": "Status (Picklist | status)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Burn-in In Progress", "value": "46", "description": "" }, { "name": "Client Non-Responsive", "value": "37", "description": "" }, { "name": "Complete", "value": "5", "description": "" }, { "name": "Dispatched", "value": "10", "description": "" }, { "name": "End User Note Added", "value": "19", "description": "" }, { "name": "Escalate", "value": "11", "description": "" }, { "name": "Escalate to CSM", "value": "61", "description": "" }, { "name": "Escalate to Customer HD", "value": "62", "description": "" }, { "name": "Escalate to MC", "value": "48", "description": "" }, { "name": "Escalate to Wulf", "value": "57", "description": "" }, { "name": "Huddle Review", "value": "55", "description": "" }, { "name": "In Progress", "value": "8", "description": "" }, { "name": "Internal Note Added", "value": "66", "description": "" }, { "name": "Loading Customer Config", "value": "60", "description": "" }, { "name": "Need to Order/Fulfill", "value": "59", "description": "" }, { "name": "New", "value": "1", "description": "Default value" }, { "name": "On Hold", "value": "25", "description": "" }, { "name": "Outsourced", "value": "69", "description": "" }, { "name": "Pending Next Site Visit", "value": "45", "description": "" }, { "name": "Pre-Pick Order", "value": "58", "description": "" }, { "name": "Quote Delivered", "value": "67", "description": "" }, { "name": "Ready for Customer Config", "value": "68", "description": "" }, { "name": "Ready to Deploy", "value": "15", "description": "" }, { "name": "Reconcile Billing", "value": "51", "description": "" }, { "name": "Reopened", "value": "16", "description": "" }, { "name": "Resolution Plan", "value": "27", "description": "" }, { "name": "Resolved ", "value": "54", "description": "" }, { "name": "Resource Assigned", "value": "14", "description": "" }, { "name": "Resource Requested", "value": "47", "description": "" }, { "name": "Service Call Scheduled", "value": "30", "description": "" }, { "name": "Tracking Shipment", "value": "56", "description": "" }, { "name": "Waiting Approval", "value": "13", "description": "" }, { "name": "Waiting Customer", "value": "7", "description": "" }, { "name": "Waiting Materials", "value": "9", "description": "" }, { "name": "Waiting Procurement", "value": "65", "description": "" }, { "name": "Waiting Project/Ticket", "value": "71", "description": "" }, { "name": "Waiting Quote Acceptance", "value": "70", "description": "" }, { "name": "Waiting Trivium Employee", "value": "64", "description": "" }, { "name": "Waiting Vendor", "value": "12", "description": "" }, { "name": "Waiting Verification", "value": "21", "description": "" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "subIssueType", "displayName": "Sub issue type (Picklist | subIssueType)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "2FA Setup", "value": "860", "description": "" }, { "name": "365 License Add", "value": "840", "description": "" }, { "name": "365 License Remove", "value": "841", "description": "" }, { "name": "365 License Request", "value": "829", "description": "" }, { "name": "401K", "value": "426", "description": "" }, { "name": "Abacus", "value": "539", "description": "" }, { "name": "Abacus", "value": "593", "description": "" }, { "name": "Access Point", "value": "724", "description": "" }, { "name": "Accessories", "value": "237", "description": "" }, { "name": "Account Compromised", "value": "315", "description": "" }, { "name": "Account Lockout", "value": "775", "description": "" }, { "name": "Active Directory", "value": "158", "description": "" }, { "name": "Active Directory", "value": "369", "description": "" }, { "name": "AD account lockout", "value": "795", "description": "" }, { "name": "Add", "value": "418", "description": "" }, { "name": "Add New User", "value": "522", "description": "" }, { "name": "Add User/Line", "value": "413", "description": "" }, { "name": "Adobe Product(s)", "value": "541", "description": "" }, { "name": "Advanced Threat Protection Drop Ale", "value": "786", "description": "" }, { "name": "Agent disabled", "value": "788", "description": "" }, { "name": "AMS 360", "value": "767", "description": "" }, { "name": "Android App Issue", "value": "421", "description": "" }, { "name": "AntiVirus (Not Wulf Managed)", "value": "318", "description": "" }, { "name": "Appgate", "value": "890", "description": "" }, { "name": "Apple Server", "value": "728", "description": "" }, { "name": "Apple Workstation", "value": "727", "description": "" }, { "name": "Apple Workstation", "value": "732", "description": "" }, { "name": "Ardagh Help Desk", "value": "520", "description": "" }, { "name": "Aruba 2530/40 EOL", "value": "885", "description": "" }, { "name": "Audio", "value": "372", "description": "" }, { "name": "Audio", "value": "804", "description": "" }, { "name": "Audio Device Disconnected", "value": "782", "description": "" }, { "name": "Audio Visual", "value": "825", "description": "" }, { "name": "Auto-complete", "value": "569", "description": "" }, { "name": "AutoCAD", "value": "389", "description": "" }, { "name": "AutoCAD", "value": "532", "description": "" }, { "name": "AutoCAD", "value": "581", "description": "" }, { "name": "Autotask PSA", "value": "687", "description": "" }, { "name": "Auvik", "value": "573", "description": "" }, { "name": "Auvik", "value": "696", "description": "" }, { "name": "Auvik Collector Disconnected", "value": "680", "description": "" }, { "name": "Backup: Veeam Agent for Microsoft Windows", "value": "637", "description": "" }, { "name": "Backup: Veeam Backup & Replication", "value": "634", "description": "" }, { "name": "BAQ", "value": "509", "description": "" }, { "name": "BarTender", "value": "712", "description": "" }, { "name": "Battery Replace Indicator", "value": "287", "description": "" }, { "name": "Battery Status", "value": "285", "description": "" }, { "name": "Billing", "value": "309", "description": "" }, { "name": "BitLocker", "value": "764", "description": "" }, { "name": "Bitwarden", "value": "851", "description": "" }, { "name": "Bitwarden setup", "value": "849", "description": "" }, { "name": "Blackberry", "value": "105", "description": "" }, { "name": "Bluebeam", "value": "534", "description": "" }, { "name": "BlueBeam", "value": "579", "description": "" }, { "name": "Blumira", "value": "904", "description": "" }, { "name": "Blumira", "value": "908", "description": "" }, { "name": "Breach", "value": "553", "description": "" }, { "name": "Brightsign", "value": "843", "description": "" }, { "name": "Bypass Enabled", "value": "776", "description": "" }, { "name": "Cables & Parts", "value": "361", "description": "" }, { "name": "Calendar Permissions", "value": "571", "description": "" }, { "name": "CallTower", "value": "564", "description": "" }, { "name": "Carrier Websites", "value": "273", "description": "" }, { "name": "Cell Phone", "value": "735", "description": "" }, { "name": "Change management", "value": "450", "description": "" }, { "name": "Change Reqeust", "value": "609", "description": "" }, { "name": "Change Request", "value": "514", "description": "" }, { "name": "Change Request", "value": "599", "description": "" }, { "name": "Change Request", "value": "602", "description": "" }, { "name": "Change Request", "value": "604", "description": "" }, { "name": "Change Request", "value": "605", "description": "" }, { "name": "Change Request", "value": "612", "description": "" }, { "name": "Chirotouch", "value": "293", "description": "" }, { "name": "Chirotouch", "value": "639", "description": "" }, { "name": "Chrome", "value": "542", "description": "" }, { "name": "Circuit", "value": "126", "description": "" }, { "name": "Citrix Share File", "value": "335", "description": "" }, { "name": "Client Audit", "value": "238", "description": "" }, { "name": "Client Budgeting", "value": "879", "description": "" }, { "name": "Client Business Review", "value": "239", "description": "" }, { "name": "Client Consultation Service", "value": "892", "description": "" }, { "name": "Client Offboarding", "value": "304", "description": "" }, { "name": "Client Onboarding", "value": "303", "description": "" }, { "name": "Client Request for Order", "value": "887", "description": "" }, { "name": "Client Request for Quote", "value": "886", "description": "" }, { "name": "Client Service Request", "value": "880", "description": "" }, { "name": "Client Technology Alignment Review", "value": "891", "description": "" }, { "name": "CloudRadial SaaS", "value": "740", "description": "" }, { "name": "Compromised Account", "value": "552", "description": "" }, { "name": "Conditional Access Policy", "value": "859", "description": "" }, { "name": "Conest", "value": "861", "description": "" }, { "name": "Conferencing Equipment Other", "value": "567", "description": "" }, { "name": "ConnectWise Control", "value": "497", "description": "" }, { "name": "Controller (iPad)", "value": "779", "description": "" }, { "name": "Cornerstone", "value": "292", "description": "" }, { "name": "Cornerstone", "value": "640", "description": "" }, { "name": "Counterpoint", "value": "643", "description": "" }, { "name": "CPU Fan Status", "value": "281", "description": "" }, { "name": "CPU Performance", "value": "439", "description": "" }, { "name": "Creo", "value": "834", "description": "" }, { "name": "Customer Specific", "value": "116", "description": "" }, { "name": "DarkWeb ID", "value": "697", "description": "" }, { "name": "Dash", "value": "713", "description": "" }, { "name": "Dashboard", "value": "511", "description": "" }, { "name": "Datto Managed Power", "value": "741", "description": "" }, { "name": "Datto RMM", "value": "688", "description": "" }, { "name": "Datto Work Place", "value": "341", "description": "" }, { "name": "Decommission", "value": "719", "description": "" }, { "name": "Decommission Workstation", "value": "718", "description": "" }, { "name": "Deltek", "value": "535", "description": "" }, { "name": "Deltek", "value": "584", "description": "" }, { "name": "Dentrix", "value": "817", "description": "" }, { "name": "Deployment", "value": "521", "description": "" }, { "name": "Desk Director", "value": "811", "description": "" }, { "name": "Desktop", "value": "248", "description": "" }, { "name": "Desktop - Outlook", "value": "451", "description": "" }, { "name": "Desktop App Issue", "value": "416", "description": "" }, { "name": "Desktop App. (Non Standard)", "value": "225", "description": "" }, { "name": "Desktop App. (Standard)", "value": "160", "description": "" }, { "name": "Desktop App. (Standard)", "value": "226", "description": "" }, { "name": "DHCP", "value": "162", "description": "" }, { "name": "Disk usage", "value": "438", "description": "" }, { "name": "Display", "value": "745", "description": "" }, { "name": "Distributed File System Replication is Degraded", "value": "675", "description": "" }, { "name": "Distribution Group", "value": "771", "description": "" }, { "name": "DMARC - SPF/DKIM", "value": "714", "description": "" }, { "name": "DNS", "value": "135", "description": "" }, { "name": "DNS", "value": "163", "description": "" }, { "name": "Docking Station", "value": "769", "description": "" }, { "name": "Domain Controller Monitoring", "value": "614", "description": "" }, { "name": "Domain Names", "value": "572", "description": "" }, { "name": "Drive Mappings", "value": "761", "description": "" }, { "name": "DTR (TMM)", "value": "708", "description": "" }, { "name": "DUO Enrollment", "value": "813", "description": "" }, { "name": "DUO Lockout", "value": "758", "description": "" }, { "name": "DUO MFA", "value": "883", "description": "" }, { "name": "Duplicate", "value": "211", "description": "" }, { "name": "DynDNS", "value": "699", "description": "" }, { "name": "Ebonds - Zapier", "value": "869", "description": "" }, { "name": "Ebonds - Gravity Forms", "value": "867", "description": "" }, { "name": "Ebonds - Sharepoint", "value": "868", "description": "" }, { "name": "eDiscovery", "value": "711", "description": "" }, { "name": "Edit User/Line", "value": "415", "description": "" }, { "name": "Egnyte", "value": "766", "description": "" }, { "name": "Elevate Permissions", "value": "765", "description": "" }, { "name": "Email", "value": "118", "description": "" }, { "name": "Email", "value": "122", "description": "" }, { "name": "Email Signatures", "value": "568", "description": "" }, { "name": "Encryption", "value": "113", "description": "" }, { "name": "Enom", "value": "698", "description": "" }, { "name": "Environmental", "value": "472", "description": "" }, { "name": "Epicor", "value": "587", "description": "" }, { "name": "Evaluation", "value": "546", "description": "" }, { "name": "Event logs", "value": "437", "description": "" }, { "name": "Exal MES Related", "value": "259", "description": "" }, { "name": "Exchange", "value": "109", "description": "" }, { "name": "Failure - Out of Warranty", "value": "544", "description": "" }, { "name": "Failure - Under Warranty", "value": "545", "description": "" }, { "name": "False Alert", "value": "212", "description": "" }, { "name": "Fax", "value": "847", "description": "" }, { "name": "Fax & vFax", "value": "133", "description": "" }, { "name": "Fax & vFax", "value": "503", "description": "" }, { "name": "Fiix", "value": "715", "description": "" }, { "name": "File Permissions", "value": "760", "description": "" }, { "name": "FileZilla", "value": "820", "description": "" }, { "name": "FireFox", "value": "543", "description": "" }, { "name": "Firewall", "value": "124", "description": "" }, { "name": "Firewall", "value": "166", "description": "" }, { "name": "Firewall", "value": "198", "description": "" }, { "name": "Firewall", "value": "244", "description": "" }, { "name": "Firewall", "value": "324", "description": "" }, { "name": "Firewall", "value": "445", "description": "" }, { "name": "Firewall", "value": "721", "description": "" }, { "name": "Firmware", "value": "210", "description": "" }, { "name": "Firmware", "value": "235", "description": "" }, { "name": "Forward Setup", "value": "862", "description": "" }, { "name": "Foundation", "value": "641", "description": "" }, { "name": "FoxPro", "value": "750", "description": "" }, { "name": "Full Disk Encryption", "value": "111", "description": "" }, { "name": "General", "value": "117", "description": "" }, { "name": "GPO", "value": "371", "description": "" }, { "name": "Group Policy", "value": "167", "description": "" }, { "name": "Group Policy", "value": "398", "description": "" }, { "name": "HaaS (Lifecycle)", "value": "856", "description": "" }, { "name": "HaaS (New)", "value": "857", "description": "" }, { "name": "Handset Issue", "value": "422", "description": "" }, { "name": "Hardware", "value": "119", "description": "" }, { "name": "Hardware", "value": "423", "description": "" }, { "name": "Hardware", "value": "556", "description": "" }, { "name": "Hardware Issue", "value": "397", "description": "" }, { "name": "Hardware Support", "value": "466", "description": "" }, { "name": "Health Benefits", "value": "425", "description": "" }, { "name": "Home PC Performance", "value": "530", "description": "" }, { "name": "Huntress", "value": "481", "description": "" }, { "name": "Huntress Detection", "value": "778", "description": "" }, { "name": "Huntress Detection 365", "value": "777", "description": "" }, { "name": "HuntressAgent' isStopped", "value": "866", "description": "" }, { "name": "Hypervisor CPU Module", "value": "668", "description": "" }, { "name": "Hypervisor Hard Drive", "value": "667", "description": "" }, { "name": "Hypervisor Power Supply", "value": "669", "description": "" }, { "name": "Hypervisor RAM Module", "value": "670", "description": "" }, { "name": "HyperVisor: ESXi", "value": "621", "description": "" }, { "name": "HyperVisor: Hyper-V", "value": "774", "description": "" }, { "name": "Image Right", "value": "272", "description": "" }, { "name": "Image Right", "value": "577", "description": "" }, { "name": "Inbound Calling", "value": "409", "description": "" }, { "name": "Incident Response", "value": "909", "description": "" }, { "name": "Incoming", "value": "115", "description": "" }, { "name": "Informational", "value": "874", "description": "" }, { "name": "Internal Meeting", "value": "549", "description": "" }, { "name": "Internet", "value": "45", "description": "" }, { "name": "Internet", "value": "49", "description": "" }, { "name": "Internet", "value": "61", "description": "" }, { "name": "Internet", "value": "80", "description": "" }, { "name": "Internet", "value": "98", "description": "" }, { "name": "Internet", "value": "504", "description": "" }, { "name": "Internet Connection is Lost", "value": "676", "description": "" }, { "name": "Intranet/LAN", "value": "46", "description": "" }, { "name": "Intranet/LAN", "value": "50", "description": "" }, { "name": "Intranet/LAN", "value": "62", "description": "" }, { "name": "Intranet/LAN", "value": "81", "description": "" }, { "name": "Intranet/LAN", "value": "99", "description": "" }, { "name": "Intrusion Prevention", "value": "784", "description": "" }, { "name": "Inventory Management", "value": "528", "description": "" }, { "name": "iPad", "value": "720", "description": "" }, { "name": "iPad", "value": "734", "description": "" }, { "name": "iPhone App Issue", "value": "420", "description": "" }, { "name": "IPSec Tunnel", "value": "783", "description": "" }, { "name": "IQMS", "value": "797", "description": "" }, { "name": "ISP", "value": "462", "description": "" }, { "name": "Issue Receiving", "value": "313", "description": "" }, { "name": "Issue Sending", "value": "312", "description": "" }, { "name": "IT Staff Tools", "value": "704", "description": "" }, { "name": "Kerri Door System", "value": "835", "description": "" }, { "name": "Kill performed", "value": "792", "description": "" }, { "name": "Kofax", "value": "833", "description": "" }, { "name": "Laptop", "value": "561", "description": "" }, { "name": "Large File Sending", "value": "493", "description": "" }, { "name": "Last Pass", "value": "858", "description": "" }, { "name": "Lenovo Warranty Claim", "value": "865", "description": "" }, { "name": "Licensing Change", "value": "353", "description": "" }, { "name": "Lighthouse Alert", "value": "794", "description": "" }, { "name": "Limble", "value": "827", "description": "" }, { "name": "Liongard", "value": "701", "description": "" }, { "name": "LOB Support", "value": "463", "description": "" }, { "name": "Local Admin Rights Request", "value": "828", "description": "" }, { "name": "LogMeIn", "value": "498", "description": "" }, { "name": "Low Bandwidth", "value": "781", "description": "" }, { "name": "Low Battery Charge", "value": "894", "description": "" }, { "name": "Low Disk Space", "value": "396", "description": "" }, { "name": "Lumion", "value": "803", "description": "" }, { "name": "Mailbox Delegation", "value": "570", "description": "" }, { "name": "Mailbox Full", "value": "838", "description": "" }, { "name": "Malvertising", "value": "816", "description": "" }, { "name": "Malware", "value": "554", "description": "" }, { "name": "Managed Power", "value": "393", "description": "" }, { "name": "Microsoft 365 Backup", "value": "884", "description": "" }, { "name": "Mimecast", "value": "703", "description": "" }, { "name": "Mimecast - Allow Sender", "value": "707", "description": "" }, { "name": "Mimecast - Block Sender", "value": "832", "description": "" }, { "name": "Mimecast - DKIM", "value": "807", "description": "" }, { "name": "Mimecast - DMARC", "value": "808", "description": "" }, { "name": "Mimecast - Message Tracking", "value": "806", "description": "" }, { "name": "Mimecast - Release Email", "value": "706", "description": "" }, { "name": "Mimecast - SPF", "value": "809", "description": "" }, { "name": "Mimecast - TTP", "value": "845", "description": "" }, { "name": "Mimecast - URL Protection", "value": "812", "description": "" }, { "name": "Mimecast Plugin", "value": "773", "description": "" }, { "name": "Mimecast Portal", "value": "772", "description": "" }, { "name": "Misc Issue", "value": "512", "description": "" }, { "name": "MiSys", "value": "709", "description": "" }, { "name": "Mobile", "value": "452", "description": "" }, { "name": "Mobile App Issue", "value": "417", "description": "" }, { "name": "Mobile Device", "value": "173", "description": "" }, { "name": "Modem", "value": "246", "description": "" }, { "name": "Modification", "value": "311", "description": "" }, { "name": "Modify", "value": "419", "description": "" }, { "name": "Monitor", "value": "327", "description": "" }, { "name": "MS Excel", "value": "842", "description": "" }, { "name": "MS Office", "value": "332", "description": "" }, { "name": "MS OneDrive", "value": "345", "description": "" }, { "name": "MS Powerpoint", "value": "800", "description": "" }, { "name": "MS Project", "value": "836", "description": "" }, { "name": "MS Skype", "value": "562", "description": "" }, { "name": "MS Teams", "value": "566", "description": "" }, { "name": "MS Teams", "value": "798", "description": "" }, { "name": "MS Word", "value": "799", "description": "" }, { "name": "MSP Tool", "value": "407", "description": "" }, { "name": "N/A", "value": "271", "description": "" }, { "name": "N/A", "value": "442", "description": "" }, { "name": "N/A", "value": "448", "description": "" }, { "name": "N/A", "value": "477", "description": "" }, { "name": "N/A", "value": "502", "description": "" }, { "name": "NAS / SAN", "value": "216", "description": "" }, { "name": "NAS /SAN", "value": "227", "description": "" }, { "name": "Network Element Offline", "value": "681", "description": "" }, { "name": "Network: Firewalls - Sophos XG", "value": "622", "description": "" }, { "name": "Network: NAS Devices - Synology", "value": "615", "description": "" }, { "name": "Network: Switches - HP_Aruba", "value": "630", "description": "" }, { "name": "Network: Unifi APs", "value": "903", "description": "" }, { "name": "Network: UPS Devices - APC", "value": "620", "description": "" }, { "name": "Networking", "value": "531", "description": "" }, { "name": "New active threat", "value": "790", "description": "" }, { "name": "New MSA", "value": "302", "description": "" }, { "name": "New request", "value": "310", "description": "" }, { "name": "New Security Tool (MSA)", "value": "824", "description": "" }, { "name": "New Software", "value": "822", "description": "" }, { "name": "Newforma", "value": "533", "description": "" }, { "name": "Newforma", "value": "685", "description": "" }, { "name": "Nextiva", "value": "499", "description": "" }, { "name": "Nextiva", "value": "563", "description": "" }, { "name": "Nextiva Specific Issue", "value": "266", "description": "" }, { "name": "Nitro Pro PDF", "value": "588", "description": "" }, { "name": "No Survey", "value": "262", "description": "" }, { "name": "Non-Deliverable", "value": "257", "description": "" }, { "name": "Non-Windows Server", "value": "330", "description": "" }, { "name": "Not Detected", "value": "876", "description": "" }, { "name": "Not Running", "value": "875", "description": "" }, { "name": "Not Up To Date", "value": "877", "description": "" }, { "name": "O365 ADD", "value": "432", "description": "" }, { "name": "O365 Password", "value": "434", "description": "" }, { "name": "O365 REMOVE", "value": "433", "description": "" }, { "name": "O365 SPAM", "value": "431", "description": "" }, { "name": "Office Move", "value": "731", "description": "" }, { "name": "Office Move", "value": "815", "description": "" }, { "name": "Offline", "value": "276", "description": "" }, { "name": "Offline", "value": "284", "description": "" }, { "name": "OpenDNS", "value": "692", "description": "" }, { "name": "Operating System", "value": "557", "description": "" }, { "name": "Operational", "value": "871", "description": "" }, { "name": "Optimization - Server", "value": "218", "description": "" }, { "name": "Other", "value": "232", "description": "" }, { "name": "Other", "value": "247", "description": "" }, { "name": "Other", "value": "251", "description": "" }, { "name": "Other", "value": "255", "description": "" }, { "name": "Other", "value": "258", "description": "" }, { "name": "Other", "value": "265", "description": "" }, { "name": "Other", "value": "275", "description": "" }, { "name": "Other", "value": "300", "description": "" }, { "name": "Other", "value": "317", "description": "" }, { "name": "Other", "value": "329", "description": "" }, { "name": "Other", "value": "357", "description": "" }, { "name": "Other", "value": "364", "description": "" }, { "name": "Other", "value": "370", "description": "" }, { "name": "Other", "value": "373", "description": "" }, { "name": "Other", "value": "385", "description": "" }, { "name": "Other", "value": "386", "description": "" }, { "name": "Other", "value": "399", "description": "" }, { "name": "Other", "value": "400", "description": "" }, { "name": "Other", "value": "401", "description": "" }, { "name": "Other", "value": "402", "description": "" }, { "name": "Other", "value": "403", "description": "" }, { "name": "Other", "value": "404", "description": "" }, { "name": "Other", "value": "412", "description": "" }, { "name": "Other", "value": "424", "description": "" }, { "name": "Other", "value": "429", "description": "" }, { "name": "Other", "value": "435", "description": "" }, { "name": "Other", "value": "467", "description": "" }, { "name": "Other", "value": "479", "description": "" }, { "name": "Other", "value": "496", "description": "" }, { "name": "Other", "value": "508", "description": "" }, { "name": "Other", "value": "730", "description": "" }, { "name": "Other", "value": "762", "description": "" }, { "name": "Out of Office", "value": "839", "description": "" }, { "name": "Outbound", "value": "114", "description": "" }, { "name": "Outbound Calling", "value": "410", "description": "" }, { "name": "Outbound Issue", "value": "362", "description": "" }, { "name": "Outlook", "value": "110", "description": "" }, { "name": "Outlook / Offline", "value": "108", "description": "" }, { "name": "Output Load Amps", "value": "290", "description": "" }, { "name": "Output Load Watts", "value": "289", "description": "" }, { "name": "Output Status", "value": "288", "description": "" }, { "name": "Pardot", "value": "805", "description": "" }, { "name": "Passportal", "value": "690", "description": "" }, { "name": "Password Reset", "value": "759", "description": "" }, { "name": "Patching", "value": "193", "description": "" }, { "name": "Paycheck", "value": "427", "description": "" }, { "name": "Paycom", "value": "428", "description": "" }, { "name": "PBX", "value": "206", "description": "" }, { "name": "PBX", "value": "500", "description": "" }, { "name": "PepWave | CradlePoint", "value": "263", "description": "" }, { "name": "Performance", "value": "555", "description": "" }, { "name": "Performance - Slow PC", "value": "560", "description": "" }, { "name": "Peripheral", "value": "376", "description": "" }, { "name": "Peripheral(s)", "value": "505", "description": "" }, { "name": "Phishing", "value": "316", "description": "" }, { "name": "Phishing", "value": "910", "description": "" }, { "name": "Phising:Attatchment", "value": "854", "description": "" }, { "name": "Phising:Credential Harvesting", "value": "853", "description": "" }, { "name": "Phising:Link", "value": "852", "description": "" }, { "name": "Phone", "value": "44", "description": "" }, { "name": "Phone", "value": "48", "description": "" }, { "name": "Phone", "value": "79", "description": "" }, { "name": "Phone", "value": "96", "description": "" }, { "name": "Phone", "value": "103", "description": "" }, { "name": "Phone", "value": "375", "description": "" }, { "name": "Phone", "value": "826", "description": "" }, { "name": "Phone System", "value": "729", "description": "" }, { "name": "PMC", "value": "689", "description": "" }, { "name": "Point of Sale", "value": "87", "description": "" }, { "name": "Point of Sale", "value": "88", "description": "" }, { "name": "Point of Sale", "value": "92", "description": "" }, { "name": "Point of Sale", "value": "93", "description": "" }, { "name": "Point of Sale", "value": "97", "description": "" }, { "name": "POS Pizza", "value": "644", "description": "" }, { "name": "Possible Power Outage", "value": "893", "description": "" }, { "name": "Power", "value": "717", "description": "" }, { "name": "Power Status", "value": "279", "description": "" }, { "name": "PowerBI", "value": "591", "description": "" }, { "name": "Preactor", "value": "296", "description": "" }, { "name": "Primary ISP Down", "value": "260", "description": "" }, { "name": "Printer", "value": "17", "description": "" }, { "name": "Printer", "value": "34", "description": "" }, { "name": "Printer", "value": "64", "description": "" }, { "name": "Printer", "value": "85", "description": "" }, { "name": "Printer", "value": "102", "description": "" }, { "name": "Printer", "value": "127", "description": "" }, { "name": "Printer", "value": "228", "description": "" }, { "name": "Printer", "value": "374", "description": "" }, { "name": "Printing", "value": "377", "description": "" }, { "name": "Processes and services", "value": "440", "description": "" }, { "name": "Production Lines (MES)", "value": "264", "description": "" }, { "name": "PSA", "value": "575", "description": "" }, { "name": "Pulse Secure VPN", "value": "796", "description": "" }, { "name": "Quarantine performed", "value": "787", "description": "" }, { "name": "QuickBooks", "value": "583", "description": "" }, { "name": "Quote", "value": "128", "description": "" }, { "name": "Rackspace", "value": "107", "description": "" }, { "name": "Raid Status", "value": "282", "description": "" }, { "name": "Ransomware", "value": "911", "description": "" }, { "name": "Ransomware: Windows Servers", "value": "747", "description": "" }, { "name": "Ransomware: Windows Workstations", "value": "748", "description": "" }, { "name": "RDP\\RDS Gateway", "value": "495", "description": "" }, { "name": "Receiving Issue", "value": "363", "description": "" }, { "name": "Remote Workforce", "value": "770", "description": "" }, { "name": "Remove User/Line", "value": "414", "description": "" }, { "name": "Report", "value": "510", "description": "" }, { "name": "Restore Request", "value": "267", "description": "" }, { "name": "ResWare", "value": "580", "description": "" }, { "name": "Revisto", "value": "864", "description": "" }, { "name": "Revit", "value": "390", "description": "" }, { "name": "Revit", "value": "537", "description": "" }, { "name": "Revit", "value": "582", "description": "" }, { "name": "Risk", "value": "872", "description": "" }, { "name": "Risk Acceptance", "value": "913", "description": "" }, { "name": "Risk Assessment", "value": "863", "description": "" }, { "name": "RMA", "value": "559", "description": "" }, { "name": "RMM", "value": "129", "description": "" }, { "name": "RMM", "value": "219", "description": "" }, { "name": "RMM Agent", "value": "700", "description": "" }, { "name": "RocketCyber", "value": "693", "description": "" }, { "name": "Role Change", "value": "213", "description": "" }, { "name": "Router", "value": "245", "description": "" }, { "name": "Router", "value": "476", "description": "" }, { "name": "Router / Switch", "value": "176", "description": "" }, { "name": "Router / Switch", "value": "229", "description": "" }, { "name": "Safe Sender Validation", "value": "844", "description": "" }, { "name": "Sage", "value": "586", "description": "" }, { "name": "Sage 300", "value": "305", "description": "" }, { "name": "Sage 500", "value": "295", "description": "" }, { "name": "Sagitta", "value": "274", "description": "" }, { "name": "Sagitta", "value": "291", "description": "" }, { "name": "Sagitta", "value": "576", "description": "" }, { "name": "SAN/NAS", "value": "456", "description": "" }, { "name": "SAN/NAS", "value": "474", "description": "" }, { "name": "Scan to Email", "value": "551", "description": "" }, { "name": "Scanning", "value": "550", "description": "" }, { "name": "Secure Messaging", "value": "492", "description": "" }, { "name": "Security Group", "value": "406", "description": "" }, { "name": "Security:Account Locked", "value": "846", "description": "" }, { "name": "Self Test Result", "value": "286", "description": "" }, { "name": "SentinelOne", "value": "763", "description": "" }, { "name": "Server", "value": "11", "description": "" }, { "name": "Server", "value": "28", "description": "" }, { "name": "Server", "value": "60", "description": "" }, { "name": "Server", "value": "78", "description": "" }, { "name": "Server", "value": "95", "description": "" }, { "name": "Server", "value": "123", "description": "" }, { "name": "Server", "value": "230", "description": "" }, { "name": "Server", "value": "444", "description": "" }, { "name": "Server - Authentication Issue", "value": "234", "description": "" }, { "name": "Service Account", "value": "306", "description": "" }, { "name": "Service Monitor", "value": "905", "description": "" }, { "name": "Shared Mailbox", "value": "814", "description": "" }, { "name": "Sharepoint", "value": "850", "description": "" }, { "name": "Shop Floor Online", "value": "294", "description": "" }, { "name": "Shop Floor Online", "value": "538", "description": "" }, { "name": "Shop Floor Online", "value": "642", "description": "" }, { "name": "Shortell", "value": "565", "description": "" }, { "name": "Simple Shop Floor (SSF)", "value": "710", "description": "" }, { "name": "SketchUp", "value": "585", "description": "" }, { "name": "Slow PC", "value": "256", "description": "" }, { "name": "Smartsheets", "value": "801", "description": "" }, { "name": "SMS iPad App (Hynes)", "value": "768", "description": "" }, { "name": "SoftPro", "value": "589", "description": "" }, { "name": "Software", "value": "16", "description": "" }, { "name": "Software", "value": "33", "description": "" }, { "name": "Software", "value": "83", "description": "" }, { "name": "Software", "value": "94", "description": "" }, { "name": "Software", "value": "101", "description": "" }, { "name": "Software", "value": "408", "description": "" }, { "name": "Software", "value": "447", "description": "" }, { "name": "Software", "value": "558", "description": "" }, { "name": "Software Renewal", "value": "823", "description": "" }, { "name": "SolidWorks", "value": "592", "description": "" }, { "name": "Sophos Full Disk Encryption", "value": "695", "description": "" }, { "name": "Sophos MDM", "value": "702", "description": "" }, { "name": "Sophos MDM", "value": "819", "description": "" }, { "name": "Sophos PhishThreat", "value": "691", "description": "" }, { "name": "Sophos PhishThreat", "value": "743", "description": "" }, { "name": "Sophos VPN", "value": "494", "description": "" }, { "name": "Sophos XG EOL", "value": "881", "description": "" }, { "name": "Sophos XG EOL (Currently HaaS)", "value": "888", "description": "" }, { "name": "Sophos XG EOL (Multi-Site)", "value": "889", "description": "" }, { "name": "Sophos:Block Website", "value": "855", "description": "" }, { "name": "Spam", "value": "112", "description": "" }, { "name": "SPAM", "value": "314", "description": "" }, { "name": "Spanning Tree Changed From Forwarding", "value": "674", "description": "" }, { "name": "Spyware/Malware", "value": "106", "description": "" }, { "name": "Stack Switch Member Status Change", "value": "673", "description": "" }, { "name": "Stack Switch Port Status Change", "value": "672", "description": "" }, { "name": "Static IP request", "value": "380", "description": "" }, { "name": "Storage", "value": "326", "description": "" }, { "name": "Storage", "value": "723", "description": "" }, { "name": "Subcontractor", "value": "749", "description": "" }, { "name": "Subscription License", "value": "878", "description": "" }, { "name": "Survey", "value": "261", "description": "" }, { "name": "Suspect", "value": "821", "description": "" }, { "name": "Switch", "value": "125", "description": "" }, { "name": "Switch", "value": "222", "description": "" }, { "name": "Switch", "value": "325", "description": "" }, { "name": "Switch", "value": "455", "description": "" }, { "name": "Switch", "value": "473", "description": "" }, { "name": "Switch", "value": "722", "description": "" }, { "name": "SysPro", "value": "590", "description": "" }, { "name": "System Error", "value": "513", "description": "" }, { "name": "System Error", "value": "516", "description": "" }, { "name": "System Error", "value": "517", "description": "" }, { "name": "System Error", "value": "518", "description": "" }, { "name": "System Error", "value": "519", "description": "" }, { "name": "System Error", "value": "600", "description": "" }, { "name": "System Error", "value": "608", "description": "" }, { "name": "System Fan Status", "value": "283", "description": "" }, { "name": "System Status", "value": "277", "description": "" }, { "name": "System Temperature", "value": "278", "description": "" }, { "name": "Tablet", "value": "736", "description": "" }, { "name": "Teams Room", "value": "810", "description": "" }, { "name": "Threat", "value": "870", "description": "" }, { "name": "Threat Mitigation Alert", "value": "789", "description": "" }, { "name": "TimeZest SaaS", "value": "739", "description": "" }, { "name": "Too Many Sign In Attempts", "value": "785", "description": "" }, { "name": "Upgrade", "value": "547", "description": "" }, { "name": "UPS", "value": "392", "description": "" }, { "name": "UPS", "value": "471", "description": "" }, { "name": "UPS", "value": "830", "description": "" }, { "name": "UPS - Low Battery Charge", "value": "678", "description": "" }, { "name": "UPS - Possible Power Outage", "value": "677", "description": "" }, { "name": "UPS WorldShip", "value": "837", "description": "" }, { "name": "User", "value": "120", "description": "" }, { "name": "User Account", "value": "179", "description": "" }, { "name": "User at Risk Alert", "value": "831", "description": "" }, { "name": "User at risk detected", "value": "793", "description": "" }, { "name": "User enabled agent", "value": "791", "description": "" }, { "name": "User Error", "value": "515", "description": "" }, { "name": "User Error", "value": "601", "description": "" }, { "name": "User Error", "value": "603", "description": "" }, { "name": "User Error", "value": "606", "description": "" }, { "name": "User Error", "value": "607", "description": "" }, { "name": "User Error", "value": "610", "description": "" }, { "name": "User Error", "value": "611", "description": "" }, { "name": "User Termination", "value": "526", "description": "" }, { "name": "Vendor Issue", "value": "381", "description": "" }, { "name": "Verizon Phone System", "value": "848", "description": "" }, { "name": "Video Device Disconnected", "value": "780", "description": "" }, { "name": "Virtualization", "value": "475", "description": "" }, { "name": "Voice Services", "value": "464", "description": "" }, { "name": "Voicemail", "value": "411", "description": "" }, { "name": "VoIP", "value": "436", "description": "" }, { "name": "VPN", "value": "181", "description": "" }, { "name": "VPN", "value": "199", "description": "" }, { "name": "VPN", "value": "449", "description": "" }, { "name": "VPN site to site Issue", "value": "358", "description": "" }, { "name": "Vulnerability Management", "value": "912", "description": "" }, { "name": "Warning", "value": "873", "description": "" }, { "name": "Warranty Claim", "value": "461", "description": "" }, { "name": "WattBox", "value": "742", "description": "" }, { "name": "Webroot", "value": "694", "description": "" }, { "name": "Website", "value": "405", "description": "" }, { "name": "WiFi", "value": "104", "description": "" }, { "name": "WiFi", "value": "548", "description": "" }, { "name": "WiFi Access Point", "value": "446", "description": "" }, { "name": "WiFi AP", "value": "356", "description": "" }, { "name": "WindChill", "value": "737", "description": "" }, { "name": "Windows 10 EOL", "value": "882", "description": "" }, { "name": "Windows Server", "value": "613", "description": "" }, { "name": "Windows Server", "value": "726", "description": "" }, { "name": "Windows Server", "value": "733", "description": "" }, { "name": "Windows Server: High CPU", "value": "900", "description": "" }, { "name": "Windows Server: High Memory", "value": "898", "description": "" }, { "name": "Windows Server: Low Disk Space", "value": "899", "description": "" }, { "name": "Windows Server: Offline", "value": "901", "description": "" }, { "name": "Windows Servers", "value": "907", "description": "" }, { "name": "Windows Workstation", "value": "323", "description": "" }, { "name": "Windows Workstation", "value": "616", "description": "" }, { "name": "Windows Workstation", "value": "725", "description": "" }, { "name": "Windows Workstation Life-cycle", "value": "738", "description": "" }, { "name": "Windows Workstation New", "value": "322", "description": "" }, { "name": "Windows Workstation Repurpose", "value": "746", "description": "" }, { "name": "Windows Workstation: Low Disk Space", "value": "902", "description": "" }, { "name": "Windows Workstations", "value": "906", "description": "" }, { "name": "Windows: Role - DHCP Server", "value": "624", "description": "" }, { "name": "Windows: Role - DNS Server", "value": "627", "description": "" }, { "name": "Windows: Role - Domain Controller", "value": "626", "description": "" }, { "name": "Windows: Role - Exchange Server", "value": "625", "description": "" }, { "name": "Windows: Role - Remote Desktop Server", "value": "645", "description": "" }, { "name": "Windows: Role - SQL Server Express", "value": "629", "description": "" }, { "name": "Windows: Role - SQL Server Full", "value": "628", "description": "" }, { "name": "WindowsUpdate Server- Patch Failure", "value": "897", "description": "" }, { "name": "WindowsUpdate Server- Reboot Required", "value": "649", "description": "" }, { "name": "WindowsUpdate Workstation- Patch Failure", "value": "896", "description": "" }, { "name": "WindowsUpdate- Reboot Required", "value": "895", "description": "" }, { "name": "Wireless", "value": "190", "description": "" }, { "name": "Wireless", "value": "231", "description": "" }, { "name": "Wiring", "value": "716", "description": "" }, { "name": "Wolfepak", "value": "818", "description": "" }, { "name": "Workstation", "value": "19", "description": "" }, { "name": "Workstation", "value": "32", "description": "" }, { "name": "Workstation", "value": "63", "description": "" }, { "name": "Workstation", "value": "82", "description": "" }, { "name": "Workstation", "value": "100", "description": "" }, { "name": "Workstation", "value": "121", "description": "" }, { "name": "Workstation", "value": "443", "description": "" }, { "name": "Workstation (Lifecycle)", "value": "224", "description": "" }, { "name": "Workstation (New Device)", "value": "233", "description": "" }, { "name": "Xactimate", "value": "536", "description": "" }, { "name": "Xactimate", "value": "578", "description": "" }, { "name": "Zoom", "value": "686", "description": "" }, { "name": "Zoom Room Update", "value": "705", "description": "" }, { "name": "Zoom Rooms", "value": "298", "description": "" }, { "name": "Zoom Voice", "value": "501", "description": "" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "ticketCategory", "displayName": "Ticket category (Picklist | ticketCategory)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Add New User", "value": "127", "description": "" }, { "name": "Client Request for Quote", "value": "100", "description": "" }, { "name": "Client Success", "value": "149", "description": "" }, { "name": "Copy (1) of Deploy Infrastruct", "value": "166", "description": "" }, { "name": "Customer Offboarding", "value": "123", "description": "" }, { "name": "Customer Onboarding", "value": "121", "description": "" }, { "name": "Decommission Device", "value": "147", "description": "" }, { "name": "Deploy Infrastructure Device", "value": "138", "description": "" }, { "name": "Deploy Misc. Device", "value": "116", "description": "" }, { "name": "Deploy Product Order Only", "value": "154", "description": "" }, { "name": "Deploy Software", "value": "145", "description": "" }, { "name": "Deploy Workstation", "value": "101", "description": "" }, { "name": "IT Operations", "value": "106", "description": "" }, { "name": "Lighthouse Electric Company", "value": "163", "description": "" }, { "name": "Network Operations Center", "value": "2", "description": "" }, { "name": "New Business Development", "value": "152", "description": "" }, { "name": "Penn Energy Resources", "value": "162", "description": "" }, { "name": "Premier Automation LLC", "value": "126", "description": "" }, { "name": "Project Delivery (FP)", "value": "113", "description": "" }, { "name": "Project Delivery (Internal)", "value": "137", "description": "" }, { "name": "Project Delivery (TM)", "value": "151", "description": "" }, { "name": "Purchase Order", "value": "136", "description": "" }, { "name": "Purchase Order (HaaS)", "value": "156", "description": "" }, { "name": "Purchase Order (Internal)", "value": "165", "description": "" }, { "name": "RMA", "value": "5", "description": "" }, { "name": "RocketCyber Alert", "value": "140", "description": "" }, { "name": "Security Operations Center", "value": "161", "description": "" }, { "name": "Subcontractor", "value": "150", "description": "" }, { "name": "The Thrasher Group", "value": "131", "description": "" }, { "name": "Ticket Triage", "value": "159", "description": "" }, { "name": "TNT Dynamite Pizza", "value": "133", "description": "" }, { "name": "Trivium Packaging", "value": "118", "description": "" }, { "name": "Trivium Packaging [MES]", "value": "139", "description": "" }, { "name": "User Separation", "value": "128", "description": "" }, { "name": "Vendor Support", "value": "155", "description": "" }, { "name": "Vorteq Coil Finishers", "value": "164", "description": "" }, { "name": "Wulf Employee Onboarding", "value": "125", "description": "" }, { "name": "Wulf Employee Separation", "value": "129", "description": "" }, { "name": "WULF ESCALATION DESK", "value": "134", "description": "" }, { "name": "Wulf Service Desk", "value": "3", "description": "Default value" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "ticketNumber", "displayName": "Ticket number (String | ticketNumber)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "ticketType", "displayName": "Ticket type (Picklist | ticketType)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Alert", "value": "5", "description": "" }, { "name": "Change Request", "value": "4", "description": "" }, { "name": "Incident", "value": "2", "description": "" }, { "name": "Problem", "value": "3", "description": "" }, { "name": "Service Request", "value": "1", "description": "Default value" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "title", "displayName": "Title (String | title)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": false }, { "id": "Additional Contacts", "displayName": "Additional contacts (1 | Additional Contacts)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "AI Triage Status", "displayName": "Ai triage status (Picklist | AI Triage Status)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "AI Triage Completed", "value": "AI Triage Completed", "description": "" }, { "name": "AI Triage Failed", "value": "AI Triage Failed", "description": "" }, { "name": "AI Triage Request", "value": "AI Triage Request", "description": "" }, { "name": "AI Triage Skipped", "value": "AI Triage Skipped", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Company Ownership", "displayName": "Company ownership (Picklist | Company Ownership)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "AccPac", "value": "AccPac", "description": "" }, { "name": "Lighthouse", "value": "Lighthouse", "description": "" }, { "name": "Preactor", "value": "Preactor", "description": "" }, { "name": "Trivium", "value": "Trivium", "description": "" }, { "name": "Wulf Consulting", "value": "Wulf Consulting", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Company Team Member", "displayName": "Company team member (1 | Company Team Member)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Company Ticket ID#", "displayName": "Company ticket id (1 | Company Ticket ID#)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "CSTicketNumber", "displayName": "Cs ticket number (1 | CSTicketNumber)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Customer Thermometer Temperature", "displayName": "Customer thermometer temperature (1 | Customer Thermometer Temperature)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Equipment Location", "displayName": "Equipment location (1 | Equipment Location)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Exal Division", "displayName": "Exal division (Picklist | Exal Division)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "MES", "value": "MES", "description": "" }, { "name": "Operations", "value": "Operations", "description": "" }, { "name": "South America", "value": "South America", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Issue Type Suggestion", "displayName": "Issue type suggestion (1 | Issue Type Suggestion)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "ITGlue SOP or KB Article", "displayName": "It glue sop or kb article (1 | ITGlue SOP or KB Article)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Job Number", "displayName": "Job number (1 | Job Number)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "New Hire Start Date", "displayName": "New hire start date (1 | New Hire Start Date)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Original Title", "displayName": "Original title (1 | Original Title)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Project Manager", "displayName": "Project manager (Picklist | Project Manager)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Jake Hammel", "value": "Jake Hammel", "description": "" }, { "name": "James Meier", "value": "James Meir", "description": "" }, { "name": "John Stvartak", "value": "John Stvartak", "description": "" }, { "name": "Lorentz Hinrichsen", "value": "Lorentz Hinrichsen", "description": "" }, { "name": "Tom Carlin", "value": "Tom Carlin", "description": "" }, { "name": "Tony Feerst", "value": "Tony Feerst", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Project Technical Lead", "displayName": "Project technical lead (Picklist | Project Technical Lead)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Charles Mathews", "value": "Charles Mathews", "description": "" }, { "name": "James Meier", "value": "James Meier", "description": "" }, { "name": "Lorentz Hinrichsen", "value": "Lorentz Hinrichsen", "description": "" }, { "name": "Steve Cianflone", "value": "Steve Cianflone", "description": "" }, { "name": "Tom Carlin", "value": "Tom Carlin", "description": "" }, { "name": "Tony Feerst", "value": "Tony Feerst", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Purchasing Ticket", "displayName": "Purchasing ticket (1 | Purchasing Ticket)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Review Status", "displayName": "Review status (Picklist | Review Status)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Complete", "value": "Complete", "description": "" }, { "name": "Reconcile Billing", "value": "Reconcile Billing", "description": "" }, { "name": "Waiting CSM Review", "value": "Waiting CSM Review", "description": "" }, { "name": "Waiting Escalation Review", "value": "Waiting Escalation Review", "description": "" }, { "name": "Waiting Huddle Review", "value": "Waiting Huddle Review", "description": "" }, { "name": "Waiting QBR", "value": "Waiting QBR", "description": "" }, { "name": "Waiting TAM Review", "value": "Waiting TAM Review", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Service Delivery Improvement", "displayName": "Service delivery improvement (Picklist | Service Delivery Improvement)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Automation Request", "value": "Automation Request", "description": "" }, { "name": "Checklist Request/Review", "value": "Checklist Request/Review", "description": "" }, { "name": "Documentation Request/Review", "value": "Documentation Request/Review", "description": "" }, { "name": "Interview Ticket", "value": "Interview Ticket", "description": "" }, { "name": "Process Review", "value": "Process Review", "description": "" }, { "name": "QA Review", "value": "QA Review", "description": "" }, { "name": "Ticket Prevention", "value": "Ticket Prevention", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Shipment ETA", "displayName": "Shipment eta (3 | Shipment ETA)", "type": "dateTime", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Shipment Tracking Number(s)", "displayName": "Shipment tracking number s (1 | Shipment Tracking Number(s))", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "SOP Link", "displayName": "Sop link (1 | SOP Link)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Sub Issue Type Suggestion", "displayName": "Sub issue type suggestion (1 | Sub Issue Type Suggestion)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Subcontractor", "displayName": "Subcontractor (Picklist | Subcontractor)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "InTouch Technologies", "value": "InTouch Technologies", "description": "" }, { "name": "MGM Communications", "value": "MGM Communications", "description": "" }, { "name": "Other", "value": "Other", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "TeamsPost", "displayName": "Teams post (Picklist | TeamsPost)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "InventoryManagemet", "value": "Yes", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Termination Date", "displayName": "Termination date (1 | Termination Date)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Work Around In-Place", "displayName": "Work around in place (Picklist | Work Around In-Place)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "No", "value": "No", "description": "" }, { "name": "Unknown", "value": "Unknown", "description": "" }, { "name": "Yes", "value": "Yes", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "WCode", "displayName": "W code (Picklist | WCode)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "CAF", "value": "CAF", "description": "" }, { "name": "Croop", "value": "Croop", "description": "" }, { "name": "EAF", "value": "EAF", "description": "" }, { "name": "LOB01", "value": "LOB01", "description": "" }, { "name": "OS01", "value": "OS01", "description": "" }, { "name": "RO1", "value": "RO1", "description": "" }, { "name": "Security:O365", "value": "Security:O365", "description": "" }, { "name": "Training Request", "value": "TR", "description": "" }, { "name": "UC1", "value": "UC1", "description": "" }, { "name": "User", "value": "User", "description": "" }, { "name": "VendorBug", "value": "VendorBug", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "zOrphanLabtech-LabTechID", "displayName": "Z orphan labtech lab tech ID (1 | zOrphanLabtech-LabTechID)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "zOrphanLabtech-LTAlertID", "displayName": "Z orphan labtech lt alert ID (1 | zOrphanLabtech-LTAlertID)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true } ], "attemptToConvertTypes": false, "convertFieldsToString": false } }, "type": "n8n-nodes-autotask.autotask", "typeVersion": 1, "position": [ 3584, 320 ], "id": "197e69f0-d38f-47a4-b1b9-42a57c55a5dd", "name": "Update a ticket", "credentials": { "autotaskApi": { "id": "5IwoEmby4IbJUtEn", "name": "Autotask account 2" } } }, { "parameters": { "promptType": "define", "text": "=You are reviewing a Service Desk ticket that requires full triage and classification.\n\n### **Ticket Data**\n**ID**: {{ $json.id }}\n**Ticket Number**: {{ $json.ticketNumber }}\n**Title**: {{ $json.title }}\n**Description**: {{ $json.description }}\n\n**Current Classification:**\n- **Type**: {{ $json.ticketType }} (Label: {{ $json.ticketType_label }})\n- **Category**: {{ $json.ticketCategory }} (Label: {{ $json.ticketCategory_label }})\n- **Issue Type**: {{ $json.issueType }}\n- **Sub-Issue Type**: {{ $json.subIssueType }}\n- **Queue**: {{ $json.queueID }}\n- **Contact ID**: {{ $json.contactID }}\n\n**Additional Information:**\n- **Created**: {{ $json.createDate }}\n- **Source**: {{ $json.source_label }}\n- **Status**: {{ $json.status_label }}\n- **Submitted By**: {{ $json.creatorResourceID_label }}\n\n**IMPORTANT**: \n- The current priority value {{ $json.priority }} ({{ $json.priority_label }}) is a DEFAULT and may be incorrect\n- You MUST determine the correct priority based on:\n 1. ticketType (Incident vs Service Request)\n 2. Ticket content, urgency indicators, and business impact\n 3. Wulf SLA guidelines provided in your system message\n- DO NOT preserve the existing priority unless it matches your SLA-based analysis\n- Include the numeric ticket ID {{ $json.id }} in your response\n\n---\n\n### **Priority Determination Reminder:**\n\n**IF this is a Service Request (ticketType: 1):**\n- Critical (4): Employee separation, customer deadlines, immediate attention required\n- Minor Service (8): Simple tasks < 4 hours - consultations, reviews, simple questions, follow-ups\n- Major Service (9): Complex tasks > 4 hours - new users, migrations, major changes\n- Installation (10): PC deployments, new device setups\n\n**IF this is an Incident (ticketType: 2):**\n- Security Event (7): Active security breach or threat\n- Critical (4): Complete business disruption, multiple users affected\n- High (6): Major function lost, single user blocked from working\n- Medium (2): Functional with workarounds, non-urgent issue\n- Standard (3): General requests, no current impact\n\n**Common Service Request Examples:**\n- \"Schedule meeting to review setup\" → Minor Service (8)\n- \"How do I install...\" → Minor Service (8)\n- \"Following up on order/shipment\" → Minor Service (8)\n- \"Add new user account\" → Major Service (9)\n- \"Employee terminated today\" → Critical (4)\n\n---\n\n### **Queue Assignment Instructions**\n\n**CRITICAL: Determine the appropriate queue based on device type:**\n\n- **Level 1 Support (29682833)**: Workstations, desktops, laptops, end-user devices\n - Device names like: DT-*, LT-*, SP-*, or devices identified as workstations/laptops\n - Windows Workstation policies\n - End-user software issues\n \n- **Level 2 Support (29682969)**: Servers, infrastructure, critical systems\n - Server naming convention: [Location][App][Function][Environment][Number] (e.g., CBPDELASP01)\n - Server-related policies and infrastructure\n - Critical priority tickets (regardless of device type)\n - Security and networking issues\n - When device type cannot be determined from alerts\n\n**For this ticket:**\n- Analyze the device name, description, and policy information\n- Determine if this is a server or workstation/end-user device\n- Include your queue recommendation in the FieldIDs output\n\n---\n\n### **Critical Output Format Requirements**\n\n**YOU MUST USE THIS EXACT FORMAT - CHARACTER FOR CHARACTER:**\n\nYour response should be structured as follows (NOT wrapped in outer code fence):\n\n1. **Summary section** (your overall assessment)\n2. **Checklist section** (review each triage component)\n3. **Suggested Fixes section** (field corrections and confirmations)\n4. **Corrected Title** - MUST be on same line after colon:\n **Corrected Title**: Your title text here on same line\n5. **Rewritten Description** - Content MUST be in code fence:\n **Rewritten Description**:\nYour description content here inside code fence\n6. **Parent-Child Validation section** (your validation steps)\n7. **What Was Done Well section** (positive highlights)\n8. **Final Conclusion section** (SLA-ready assessment)\n9. **FieldIDs Output** - MUST use ```json language identifier:\n```json\n {\n \"ticketType\": 1,\n \"priority\": 8,\n \"ticketCategory\": 3,\n \"issueType\": 46,\n \"subIssueType\": 686,\n \"contactID\": 12345678,\n \"queueID\": 29682833\n }\n```\n10. **Ticket ID at end**: **Ticket ID: {{ $json.id }}**\n\n**Validation Checklist Before Sending:**\n- ✅ Response does NOT start with triple backticks (no outer code fence)\n- ✅ \"Corrected Title\" has title on SAME line after colon and space\n- ✅ \"Rewritten Description\" content is inside triple-backtick code fence\n- ✅ FieldIDs uses ```json with language identifier\n- ✅ All numeric IDs are numbers (not \"2\" but 2)\n- ✅ contactID is included and preserved from input\n- ✅ Ticket ID is at the end\n\n---\n\n### **Field-ID Output** \nAfter your analysis, output **exactly one fenced JSON block** titled **`FieldIDs`** containing these keys with their numeric IDs:\n```json\n{\n \"ticketType\": [numeric_id],\n \"priority\": [numeric_id],\n \"ticketCategory\": [numeric_id],\n \"issueType\": [numeric_id],\n \"subIssueType\": [numeric_id],\n \"contactID\": [numeric_id_from_input],\n \"queueID\": [29682833_for_Level1_or_29682969_for_Level2]\n}\n```\n\n**CRITICAL: contactID Handling:**\n- ALWAYS include contactID in the FieldIDs output\n- ALWAYS use the exact contactID value from the input: {{ $json.contactID }}\n- DO NOT modify or change the contactID value\n- If contactID is missing or null in input, still include the field with null value\n\nQueue Assignment Logic:\n- If device appears to be a workstation/laptop (like LT032, DT-*, policies mentioning \"Windows Workstation\"): use 29682833\n- If device appears to be a server or infrastructure (server naming pattern, critical systems): use 29682969\n- If critical priority: always use 29682969\n- If uncertain: default to 29682969 for safety", "options": { "systemMessage": "=**IMPORTANT: DATA PRESERVATION**\n\nYou will receive ticket data that includes a ticket ID. You MUST include this ticket ID in your response for system processing.\n\nAlways include at the end of your response:\n\n**Ticket ID: [INSERT THE ACTUAL TICKET ID FROM THE INPUT DATA]**\n\nLook for the ticket ID in the input data (it may be in fields like \"id\", \"ticketId\", or similar) and insert the actual numeric value.\n\nThis ensures the ticket can be properly updated after triage.\n\n---\n\nYou are a triage quality reviewer verifying whether Autotask tickets have been triaged correctly according to Wulf Consulting's internal Triage Guidelines and AI triage SOP.\n\nPlease review the ticket details and assess whether the triage output is compliant with Wulf's required classification, field population, and documentation standards.\n\nYou are always given a list of valid ID mappings (e.g., ticketTypeIDs, priorityIDs, etc).\n**Only use values from those dictionaries when suggesting any field value ID. Never guess or invent numeric IDs or labels that don't exist in the provided dictionaries.**\n\n## VALID AUTOTASK ID COMBINATIONS - USE EXACT IDs:\n\nissueTypeIDs = {\n\"20\": \"Reactive\",\n\"21\": \"MAC\",\n\"22\": \"Centralized Services\",\n\"25\": \"Networking\",\n\"30\": \"Server\",\n\"31\": \"Hardware\",\n\"34\": \"Email\",\n\"38\": \"Backups\",\n\"42\": \"Collaboration (Video, Voice & Chat)\",\n\"43\": \"Office Administration\",\n\"45\": \"Deployment\",\n\"46\": \"Software\",\n\"51\": \"Peripheral Connectivity\",\n\"55\": \"Human Resources\",\n\"57\": \"Datto RMM Monitoring\",\n\"59\": \"Security\",\n\"61\": \"Vendor Support\",\n\"63\": \"Remote Access\",\n\"65\": \"Home Support\",\n\"75\": \"Decommission\",\n\"76\": \"Active Directory & Accounts\",\n\"77\": \"DUO Monitoring\",\n\"78\": \"Huntress Monitoring\",\n\"79\": \"M365 Monitoring\",\n\"80\": \"SentinelOne Monitoring\",\n\"81\": \"Sophos Monitoring\",\n\"83\": \"Blumira Monitoring\",\n\"84\": \"Technology Alignment\",\n\"85\": \"Ransomware Monitoring\"\n}\n\nsubIssueTypeIDs = {\n// HUMAN RESOURCES (55) - Parent-Child Mappings\n\"522\": \"Add New User\",\n\"526\": \"User Termination\",\n\n// ACTIVE DIRECTORY & ACCOUNTS (76) - Parent-Child Mappings\n\"758\": \"DUO Lockout\",\n\"759\": \"Password Reset\",\n\"760\": \"File Permissions\",\n\"761\": \"Drive Mappings\",\n\"762\": \"Other\",\n\"795\": \"AD account lockout\",\n\"828\": \"Local Admin Rights Request\",\n\"829\": \"365 License Request\",\n\n// SOFTWARE (46) - Parent-Child Mappings\n\"332\": \"MS Office\",\n\"335\": \"Citrix Share File\",\n\"341\": \"Datto Work Place\",\n\"345\": \"MS OneDrive\",\n\"373\": \"Other\",\n\"541\": \"Adobe Product(s)\",\n\"542\": \"Chrome\",\n\"543\": \"FireFox\",\n\"576\": \"Sagitta\",\n\"577\": \"Image Right\",\n\"578\": \"Xactimate\",\n\"579\": \"BlueBeam\",\n\"580\": \"ResWare\",\n\"581\": \"AutoCAD\",\n\"582\": \"Revit\",\n\"583\": \"QuickBooks\",\n\"584\": \"Deltek\",\n\"585\": \"SketchUp\",\n\"586\": \"Sage\",\n\"587\": \"Epicor\",\n\"588\": \"Nitro Pro PDF\",\n\"589\": \"SoftPro\",\n\"590\": \"SysPro\",\n\"591\": \"PowerBI\",\n\"592\": \"SolidWorks\",\n\"593\": \"Abacus\",\n\"639\": \"Chirotouch\",\n\"640\": \"Cornerstone\",\n\"641\": \"Foundation\",\n\"642\": \"Shop Floor Online\",\n\"643\": \"Counterpoint\",\n\"644\": \"POS Pizza\",\n\"685\": \"Newforma\",\n\"687\": \"Autotask PSA\",\n\"688\": \"Datto RMM\",\n\"708\": \"DTR (TMM)\",\n\"709\": \"MiSys\",\n\"710\": \"Simple Shop Floor (SSF)\",\n\"712\": \"BarTender\",\n\"713\": \"Dash\",\n\"715\": \"Fiix\",\n\"737\": \"WindChill\",\n\"739\": \"TimeZest SaaS\",\n\"740\": \"CloudRadial SaaS\",\n\"750\": \"FoxPro\",\n\"766\": \"Egnyte\",\n\"767\": \"AMS 360\",\n\"768\": \"SMS iPad App (Hynes)\",\n\"797\": \"IQMS\",\n\"798\": \"MS Teams\",\n\"799\": \"MS Word\",\n\"800\": \"MS Powerpoint\",\n\"801\": \"Smartsheets\",\n\"803\": \"Lumion\",\n\"805\": \"Pardot\",\n\"811\": \"Desk Director\",\n\"817\": \"Dentrix\",\n\"818\": \"Wolfepak\",\n\"819\": \"Sophos MDM\",\n\"820\": \"FileZilla\",\n\"827\": \"Limble\",\n\"833\": \"Kofax\",\n\"834\": \"Creo\",\n\"835\": \"Kerri Door System\",\n\"836\": \"MS Project\",\n\"837\": \"UPS WorldShip\",\n\"842\": \"MS Excel\",\n\"843\": \"Brightsign\",\n\"850\": \"Sharepoint\",\n\"851\": \"Bitwarden\",\n\"861\": \"Conest\",\n\"864\": \"Revisto\",\n\"867\": \"Ebonds - Gravity Forms\",\n\"868\": \"Ebonds - Sharepoint\",\n\"869\": \"Ebonds - Zapier\",\n\n// COLLABORATION (42) - Parent-Child Mappings\n\"563\": \"Nextiva\",\n\"564\": \"CallTower\",\n\"565\": \"Shortell\",\n\"566\": \"MS Teams\",\n\"567\": \"Conferencing Equipment Other\",\n\"810\": \"Teams Room\",\n\"848\": \"Verizon Phone System\",\n\n// DATTO RMM MONITORING (57) - Parent-Child Mappings\n\"437\": \"Event logs\",\n\"438\": \"Disk usage\",\n\"439\": \"CPU Performance\",\n\"440\": \"Processes and services\",\n\"455\": \"Switch\",\n\"456\": \"SAN/NAS\",\n\"471\": \"UPS\",\n\"472\": \"Environmental\",\n\"573\": \"Auvik\",\n\"613\": \"Windows Server\",\n\"614\": \"Domain Controller Monitoring\",\n\"615\": \"Network: NAS Devices - Synology\",\n\"616\": \"Windows Workstation\",\n\"620\": \"Network: UPS Devices - APC\",\n\"621\": \"HyperVisor: ESXi\",\n\"622\": \"Network: Firewalls - Sophos XG\",\n\"624\": \"Windows: Role - DHCP Server\",\n\"625\": \"Windows: Role - Exchange Server\",\n\"626\": \"Windows: Role - Domain Controller\",\n\"627\": \"Windows: Role - DNS Server\",\n\"628\": \"Windows: Role - SQL Server Full\",\n\"629\": \"Windows: Role - SQL Server Express\",\n\"630\": \"Network: Switches - HP_Aruba\",\n\"634\": \"Backup: Veeam Backup & Replication\",\n\"637\": \"Backup: Veeam Agent for Microsoft Windows\",\n\"645\": \"Windows: Role - Remote Desktop Server\",\n\"649\": \"WindowsUpdate Server- Reboot Required\",\n\"667\": \"Hypervisor Hard Drive\",\n\"668\": \"Hypervisor CPU Module\",\n\"669\": \"Hypervisor Power Supply\",\n\"670\": \"Hypervisor RAM Module\",\n\"672\": \"Stack Switch Port Status Change\",\n\"673\": \"Stack Switch Member Status Change\",\n\"674\": \"Spanning Tree Changed From Forwarding\",\n\"675\": \"Distributed File System Replication is Degraded\",\n\"676\": \"Internet Connection is Lost\",\n\"677\": \"UPS - Possible Power Outage\",\n\"678\": \"UPS - Low Battery Charge\",\n\"680\": \"Auvik Collector Disconnected\",\n\"681\": \"Network Element Offline\",\n\"747\": \"Ransomware: Windows Servers\",\n\"748\": \"Ransomware: Windows Workstations\",\n\"774\": \"HyperVisor: Hyper-V\",\n\"846\": \"Security:Account Locked\",\n\"895\": \"WindowsUpdate- Reboot Required\",\n\"896\": \"WindowsUpdate Workstation- Patch Failure\",\n\"897\": \"WindowsUpdate Server- Patch Failure\",\n\"898\": \"Windows Server: High Memory\",\n\"899\": \"Windows Server: Low Disk Space\",\n\"900\": \"Windows Server: High CPU\",\n\"901\": \"Windows Server: Offline\",\n\"902\": \"Windows Workstation: Low Disk Space\",\n\"903\": \"Network: Unifi APs\",\n\"904\": \"Service Monitor\",\n\n// SECURITY (59) - Parent-Child Mappings\n\"478\": \"AntiVirus\",\n\"479\": \"Other\",\n\"480\": \"RocketCyber\",\n\"481\": \"Huntress\",\n\"552\": \"Compromised Account\",\n\"553\": \"Breach\",\n\"554\": \"Malware\",\n\"743\": \"Sophos PhishThreat\",\n\"744\": \"Sophos Encryption\",\n\"763\": \"SentinelOne\",\n\"764\": \"BitLocker\",\n\"765\": \"Elevate Permissions\",\n\"813\": \"DUO Enrollment\",\n\"816\": \"Malvertising\",\n\"831\": \"User at Risk Alert\",\n\"849\": \"Bitwarden setup\",\n\"858\": \"Last Pass\",\n\"859\": \"Conditional Access Policy\",\n\"860\": \"2FA Setup\",\n\"863\": \"Risk Assessment\",\n\"908\": \"Blumira\",\n\"909\": \"Incident Response\",\n\"910\": \"Phishing\",\n\"911\": \"Ransomware\",\n\"912\": \"Vulnerability Management\",\n\"913\": \"Risk Acceptance\",\n\n// EMAIL (34) - Parent-Child Mappings\n\"257\": \"Non-Deliverable\",\n\"312\": \"Issue Sending\",\n\"313\": \"Issue Receiving\",\n\"314\": \"SPAM\",\n\"315\": \"Account Compromised\",\n\"316\": \"Phishing\",\n\"317\": \"Other\",\n\"451\": \"Desktop - Outlook\",\n\"452\": \"Mobile\",\n\"492\": \"Secure Messaging\",\n\"493\": \"Large File Sending\",\n\"568\": \"Email Signatures\",\n\"569\": \"Auto-complete\",\n\"570\": \"Mailbox Delegation\",\n\"571\": \"Calendar Permissions\",\n\"706\": \"Mimecast - Release Email\",\n\"707\": \"Mimecast - Allow Sender\",\n\"711\": \"eDiscovery\",\n\"771\": \"Distribution Group\",\n\"772\": \"Mimecast Portal\",\n\"773\": \"Mimecast Plugin\",\n\"806\": \"Mimecast - Message Tracking\",\n\"807\": \"Mimecast - DKIM\",\n\"808\": \"Mimecast - DMARC\",\n\"809\": \"Mimecast - SPF\",\n\"812\": \"Mimecast - URL Protection\",\n\"814\": \"Shared Mailbox\",\n\"832\": \"Mimecast - Block Sender\",\n\"838\": \"Mailbox Full\",\n\"839\": \"Out of Office\",\n\"844\": \"Safe Sender Validation\",\n\"845\": \"Mimecast - TTP\",\n\"852\": \"Phising:Link\",\n\"853\": \"Phising:Credential Harvesting\",\n\"854\": \"Phising:Attatchment\",\n\"862\": \"Forward Setup\",\n\n// NETWORKING (25) - Parent-Child Mappings\n\"222\": \"Switch\",\n\"244\": \"Firewall\",\n\"245\": \"Router\",\n\"246\": \"Modem\",\n\"247\": \"Other\",\n\"260\": \"Primary ISP Down\",\n\"263\": \"PepWave | CradlePoint\",\n\"358\": \"VPN site to site Issue\",\n\"359\": \"Add - VPN User\",\n\"548\": \"WiFi\",\n\n// HARDWARE (31) - Parent-Child Mappings\n\"248\": \"Desktop\",\n\"249\": \"Server\",\n\"251\": \"Other\",\n\"544\": \"Failure - Out of Warranty\",\n\"545\": \"Failure - Under Warranty\",\n\"546\": \"Evaluation\",\n\"547\": \"Upgrade\",\n\"560\": \"Performance - Slow PC\",\n\"561\": \"Laptop\",\n\"719\": \"Decommission\",\n\"815\": \"Office Move\",\n\"830\": \"UPS\",\n\n// DEPLOYMENT (45) - Parent-Child Mappings\n\"322\": \"Windows Workstation New\",\n\"323\": \"Windows Workstation\",\n\"324\": \"Firewall\",\n\"325\": \"Switch\",\n\"326\": \"Storage\",\n\"327\": \"Monitor\",\n\"329\": \"Other\",\n\"330\": \"Non-Windows Server\",\n\"356\": \"WiFi AP\",\n\"374\": \"Printer\",\n\"375\": \"Phone\",\n\"376\": \"Peripheral\",\n\"392\": \"UPS\",\n\"393\": \"Managed Power\",\n\"436\": \"VoIP\",\n\"732\": \"Apple Workstation\",\n\"733\": \"Windows Server\",\n\"734\": \"iPad\",\n\"735\": \"Cell Phone\",\n\"736\": \"Tablet\",\n\"738\": \"Windows Workstation Life-cycle\",\n\"746\": \"Windows Workstation Repurpose\",\n\"749\": \"Subcontractor\",\n\"878\": \"Subscription License\",\n\n// SERVER (30) - Parent-Child Mappings\n\"401\": \"Other\",\n\"555\": \"Performance\",\n\"556\": \"Hardware\",\n\"557\": \"Operating System\",\n\"558\": \"Software\",\n\n// REMOTE ACCESS (63) - Parent-Child Mappings\n\"494\": \"Sophos VPN\",\n\"495\": \"RDP\\RDS Gateway\",\n\"496\": \"Other\",\n\"497\": \"ConnectWise Control\",\n\"498\": \"LogMeIn\",\n\"770\": \"Remote Workforce\",\n\"796\": \"Pulse Secure VPN\",\n\"890\": \"Appgate\",\n\n// PERIPHERAL CONNECTIVITY (51) - Parent-Child Mappings\n\"377\": \"Printing\",\n\"378\": \"Printer driver\",\n\"380\": \"Static IP request\",\n\"381\": \"Vendor Issue\",\n\"382\": \"Print Server\",\n\"384\": \"Driver issue\",\n\"385\": \"Other\",\n\"550\": \"Scanning\",\n\"551\": \"Scan to Email\",\n\"745\": \"Display\",\n\"769\": \"Docking Station\",\n\"804\": \"Audio\",\n\"847\": \"Fax\"\n}\n\nticketTypeIDs = {\n\"1\": \"Service Request\",\n\"2\": \"Incident\",\n\"4\": \"Change Request\",\n\"5\": \"Alert\"\n}\n\npriorityIDs = {\n\"2\": \"Medium\",\n\"3\": \"Standard\",\n\"4\": \"Critical\",\n\"6\": \"High\",\n\"7\": \"Security Event\",\n\"8\": \"Minor Service\",\n\"9\": \"Major Service\",\n\"10\": \"Installation\",\n\"11\": \"Fast Track\"\n}\n\nticketCategoryIDs = {\n\"3\": \"Wulf Service Desk\",\n\"127\": \"Add New User\",\n\"128\": \"User Separation\",\n\"159\": \"Ticket Triage\"\n}\n\n---\n\n## 🚨 CRITICAL: PREVENT SUBISSUETYPE HALLUCINATION\n\n**MANDATORY VALIDATION - NO EXCEPTIONS:**\n\nBefore outputting ANY subIssueType ID, you MUST verify:\n1. ✅ The ID exists in the `subIssueTypeIDs` dictionary above\n2. ✅ The ID appears in the PARENT-CHILD LOOKUP TABLE below\n3. ✅ Both sources show the SAME parent-child relationship\n\n**If verification FAILS for any step:**\n→ ❌ DO NOT use that subIssueType ID\n→ ✅ Use the parent's \"Other\" subIssueType instead\n\n**Common \"Other\" Fallback SubIssueTypes:**\n- Parent 34 (Email) → **317** (Other)\n- Parent 76 (Active Directory & Accounts) → **762** (Other)\n- Parent 46 (Software) → **373** (Other)\n- Parent 51 (Peripheral Connectivity) → **385** (Other)\n- Parent 25 (Networking) → **247** (Other)\n- Parent 31 (Hardware) → **251** (Other)\n- Parent 30 (Server) → **401** (Other)\n\n**Examples of INVALID IDs that DO NOT EXIST:**\n- ❌ 840: \"User Name Change\" - Does not exist in Autotask\n- ❌ 841: \"Group Membership\" - Does not exist in Autotask\n\n**If you see a logical need like \"user name change\":**\n→ Use issueType: 34 (Email), subIssueType: 862 (Forward Setup) OR 317 (Other)\n→ OR use issueType: 76 (Active Directory), subIssueType: 762 (Other)\n→ DO NOT invent ID 840\n\n---\n\n## ⚠️ CRITICAL: PREVENT CLASSIFICATION ERRORS - CHECK THESE FIRST\n\n**BEFORE doing ANY classification, you MUST check these rules in order:**\n\n### 🚨 RULE 1: Email Keywords = Email Parent (34) - HIGHEST PRIORITY\n\n**If the ticket contains ANY of these words, it MUST use issueType 34 (Email):**\n\n**Email Keywords (case-insensitive):**\n- \"email\" / \"e-mail\" / \"emails\"\n- \"inbox\" / \"mailbox\" / \"mail box\"\n- \"unable to access email\" / \"can't access email\" / \"can't get into email\"\n- \"email not working\" / \"email down\" / \"email issue\"\n- \"can't send email\" / \"can't receive email\" / \"email delivery\"\n- \"contact email\" / \"main email\" / \"clinic email\"\n- Domain + email: (\"domain\" OR \"godaddy\" OR \"dns\") AND \"email\"\n\n**When you find email keywords, STOP and use Parent 34:**\n\n**Email Sub-Issue Selection (Parent 34):**\n- Can't send: 312 (Issue Sending)\n- Can't receive / can't access: 313 (Issue Receiving)\n- Domain/DNS/access issues: 317 (Other)\n- Outlook application crashes: 451 (Desktop - Outlook)\n- Spam/junk: 314 (SPAM)\n- Phishing: 316 (Phishing)\n- Signatures: 568 (Email Signatures)\n\n**❌ NEVER classify email tickets as:**\n- ❌ Collaboration (42)\n- ❌ Software (46) - Unless it's about Outlook APP crashing (then use 46→332)\n- ❌ Any other parent except 34 (Email)\n\n---\n\n### 🚨 RULE 2: Microsoft 365 Apps = MS Office (332) Under Software (46)\n\n**Microsoft Sway, OneNote, Visio, Publisher, Access, Forms, Planner:**\n- Use issueType: 46 (Software)\n- Use subIssueType: 332 (MS Office)\n\n**Unless the Microsoft app has its own specific ID:**\n- Teams → 566 or 798\n- OneDrive → 345\n- Word → 799\n- Excel → 842\n- PowerPoint → 800\n- SharePoint → 850\n- Project → 836\n\n---\n\n### 🚨 RULE 3: Never Invent Connections\n\n**YOU MUST NOT:**\n- ❌ Assume email requires specific tools\n- ❌ Classify email as collaboration\n- ❌ Use any ID as a \"catch-all\" for unrelated content\n- ❌ Invent facts not present in the ticket\n- ❌ Use \"analogous reasoning\" (X is like Y, so use Y's classification)\n- ❌ Make assumptions about what technology MIGHT be involved\n\n**YOU MUST:**\n- ✅ Only classify based on explicit words in the ticket\n- ✅ If ticket says \"email\" → use issueType 34\n- ✅ If ticket mentions specific software → use that software's classification\n- ✅ If ticket mentions neither → classify based on actual content\n\n---\n\n## 🎯 CRITICAL: Output Format Requirements (MUST FOLLOW EXACTLY)\n\nBefore anything else, understand you MUST use this EXACT output format:\n\n### Required Output Structure\n\n**CRITICAL: Do NOT wrap your entire response in code fences. Output the text directly.**\n\nYour response should start immediately with:\n\n### Summary\n[Your overall assessment text here]\n\n### Checklist – Review Each Triage Component\n[Your checklist items here]\n\n### Suggested Fixes\n[Your field corrections here]\n\n**Corrected Title**: Your cleaned title text goes here on the same line\n\n**Rewritten Description**:\n```\nYour formatted description goes here inside this code fence\n```\n\n### PARENT-CHILD VALIDATION:\n[Your validation steps here]\n\n### What Was Done Well\n[Positive highlights here]\n\n### Final Conclusion\n[SLA-ready assessment here]\n\n### FieldIDs Output\n```json\n{\n \"ticketType\": 1,\n \"priority\": 8,\n \"ticketCategory\": 3,\n \"issueType\": 34,\n \"subIssueType\": 313,\n \"contactID\": 12345678,\n \"queueID\": 29682833\n}\n```\n\n**Ticket ID: [actual_ticket_id_number]**\n\n---\n\n### Format Rules (Character-for-Character)\n\n1. **Section Headers** - Use `###` followed by space and title\n2. **Bold Labels** - Use `**Label**:` (double asterisks, single colon)\n3. **Corrected Title** - Label and title on SAME line (one space after colon)\n4. **Rewritten Description** - Label on one line, then triple-backtick code fence with content inside\n5. **FieldIDs JSON** - Must have `json` language identifier after opening backticks\n6. **Numeric Values** - All IDs must be numbers, NOT strings (use 2 not \"2\")\n7. **contactID** - Must be included and preserved from input\n8. **Ticket ID** - Must be last line of output\n\n**Validation Checklist (Check Before Sending):**\n- ✅ Response starts with \"### Summary\" (NOT with triple backticks)\n- ✅ \"Corrected Title\" has title on SAME line after colon and space\n- ✅ \"Rewritten Description\" content is inside triple-backtick code fence\n- ✅ FieldIDs uses ```json with language identifier\n- ✅ All numeric IDs are numbers (not \"2\" but 2)\n- ✅ contactID is included and preserved from input\n- ✅ No code fence wrapping the entire output\n- ✅ Ticket ID is the last line\n\n---\n\n## 🚨 CRITICAL: INCIDENT vs SERVICE REQUEST CLASSIFICATION\n\n### STEP 0: Check for \"WAS WORKING\" Language FIRST\n\n**Before anything else, scan the ticket for these temporal indicators:**\n\n- \"was working fine this morning until it wasn't\"\n- \"worked yesterday but not today\"\n- \"stopped working\"\n- \"used to work\"\n- \"previously worked\"\n- \"was able to [do X] before\"\n- \"it broke\"\n- \"it quit working\"\n- \"suddenly stopped\"\n\n**If ANY of these phrases are present:**\n→ **This is ALWAYS an Incident (2), NEVER a Service Request**\n→ Do NOT proceed to Step 1 classification logic\n→ Go directly to Incident priority assessment (Step 2)\n\n**Why this matters:**\nIf something WAS working and NOW is not, that's a failure/disruption = Incident by definition.\n\n---\n\n### STEP 1: Determine ticketType\n\n**Incident (ID 2)** - Something is NOT WORKING or BROKEN:\n- Error messages, failures, disruptions\n- **\"Can't access\" + [thing user SHOULD have access to]**\n- \"Not working\", \"getting error\", \"unable to\", \"won't open\", \"failed\"\n- **Previously worked, now doesn't** ← KEY INDICATOR (checked in STEP 0)\n- System outages, service degradation, performance issues\n- Access denied, login failures, crashes, disconnections\n- Examples: \n - \"Outlook won't open\" ← Incident\n - \"Can't print\" ← Incident\n - \"Email not sending\" ← Incident\n - \"Can't access Microsoft Sway - was working this morning\" ← Incident\n - \"Getting error message when opening file\" ← Incident\n - \"VPN keeps disconnecting\" ← Incident\n - \"Application crashes when I try to save\" ← Incident\n - \"Unable to access main email\" ← Incident\n\n**Service Request (ID 1)** - User ASKING FOR something NEW or REQUESTING help:\n- **\"Can I have access to\" + [new system/resource]** ← NEW access request\n- \"How do I...\" ← How-to question\n- \"Please set up...\" ← New setup\n- \"Need account for...\" ← New account\n- How-to questions, consultations, reviews, training\n- Installations, setups, configurations\n- Follow-ups on orders, deployments, or pending work\n- Schedule requests, meeting coordination\n- Employee onboarding (category 127) and offboarding (category 128)\n- Examples: \n - \"Install software\" ← Service Request\n - \"Review my OneDrive setup\" ← Service Request\n - \"Create new user account\" ← Service Request\n - \"How do I install application?\" ← Service Request\n - \"Can I get access to the new SharePoint site?\" ← Service Request (NEW access)\n - \"Schedule time to discuss my file organization\" ← Service Request\n - \"New hire starting 11/6\" ← Service Request\n - \"Following up on my docking station shipment\" ← Service Request\n\n---\n\n### STEP 2: Determine Priority (based on ticketType from STEP 1)\n\n**If Incident (2):**\n- Use Incident SLA priorities: Security Event (7), Critical (4), High (6), Medium (2), Standard (3)\n- Assess business impact and number of affected users\n- Consider whether user has workarounds available\n\n**If Service Request (1):**\n- Use Service Request SLA priorities: Critical (4), Minor Service (8), Major Service (9), Installation (10)\n- **FIRST check if ticketCategory = 127 or 128** (fixed priorities apply)\n- Then assess complexity (< 4 hours vs > 4 hours)\n- Check for urgency keywords (ASAP, deadline, terminated, etc.)\n- **Default for consultations/reviews/questions: Minor Service (8)**\n- **Default for new users (category 127): Minor Service (8)**\n- **Default for user separations (category 128): Critical (4)**\n\n---\n\n## CRITICAL: PARENT-CHILD RELATIONSHIP VALIDATION\n\n**Every issueType is a PARENT. Every subIssueType is a CHILD.**\n**A child can only belong to ONE parent.**\n**You MUST verify the parent-child relationship before suggesting any combination.**\n\n⚠️ **CRITICAL VALIDATION RULE: DO NOT USE LOGICAL REASONING**\n\n**You MUST search the lookup table literally - do NOT assume based on concepts:**\n- ❌ WRONG: \"Docking stations are hardware, so use parent 31\"\n- ✅ CORRECT: \"Search the lookup table for ID 769... Found under parent 51\"\n- ❌ WRONG: \"Email is communication, use collaboration parent\"\n- ✅ CORRECT: \"Ticket says 'email' → RULE 1 → use parent 34\"\n\n### MANDATORY VALIDATION CHECKLIST:\n\n**Before finalizing any issueType + subIssueType combination, you MUST complete these steps:**\n\n**Step 1:** \"I want to classify this as: [DESCRIPTION]\"\n\n**Step 2:** \"Looking for subIssueType label '[LABEL]' in the subIssueTypeIDs dictionary...\"\n\n**Step 3:** \"Found: [NUMBER]: '[LABEL]'\"\n\n**Step 4:** \"Now I must find which PARENT this child belongs to by searching the lookup table below...\"\n\n**Step 5:** \"Searching lookup table... Found [NUMBER]: '[LABEL]' under PARENT [PARENT_NUMBER] ([PARENT_LABEL])\"\n\n**Step 6:** \"Double-checking: Looking at PARENT [PARENT_NUMBER]'s children list... Is [NUMBER] listed? [YES/NO]\"\n\n**Step 7:** \"Final Answer: issueType: [PARENT_NUMBER], subIssueType: [NUMBER]\"\n\n**If Step 6 = NO, you MUST go back to Step 4 and search again until you find the correct parent.**\n\n### PARENT-CHILD LOOKUP TABLE WITH LABELS\n\nUse this table to validate EVERY issueType + subIssueType combination:\n```\nPARENT 20 (Reactive)\n└── No specific children defined - use as fallback\n\nPARENT 25 (Networking)\n├── 222: Switch\n├── 244: Firewall\n├── 245: Router\n├── 246: Modem\n├── 247: Other\n├── 260: Primary ISP Down\n├── 263: PepWave | CradlePoint\n├── 358: VPN site to site Issue\n├── 359: Add - VPN User\n└── 548: WiFi\n\nPARENT 30 (Server)\n├── 401: Other\n├── 555: Performance\n├── 556: Hardware\n├── 557: Operating System\n└── 558: Software\n\nPARENT 31 (Hardware)\n├── 248: Desktop\n├── 249: Server\n├── 251: Other\n├── 544: Failure - Out of Warranty\n├── 545: Failure - Under Warranty\n├── 546: Evaluation\n├── 547: Upgrade\n├── 560: Performance - Slow PC\n├── 561: Laptop\n├── 719: Decommission\n├── 815: Office Move\n└── 830: UPS\n\nPARENT 34 (Email)\n├── 257: Non-Deliverable\n├── 312: Issue Sending\n├── 313: Issue Receiving\n├── 314: SPAM\n├── 315: Account Compromised\n├── 316: Phishing\n├── 317: Other\n├── 451: Desktop - Outlook\n├── 452: Mobile\n├── 492: Secure Messaging\n├── 493: Large File Sending\n├── 568: Email Signatures\n├── 569: Auto-complete\n├── 570: Mailbox Delegation\n├── 571: Calendar Permissions\n├── 706: Mimecast - Release Email\n├── 707: Mimecast - Allow Sender\n├── 711: eDiscovery\n├── 771: Distribution Group\n├── 772: Mimecast Portal\n├── 773: Mimecast Plugin\n├── 806: Mimecast - Message Tracking\n├── 807: Mimecast - DKIM\n├── 808: Mimecast - DMARC\n├── 809: Mimecast - SPF\n├── 812: Mimecast - URL Protection\n├── 814: Shared Mailbox\n├── 832: Mimecast - Block Sender\n├── 838: Mailbox Full\n├── 839: Out of Office\n├── 844: Safe Sender Validation\n├── 845: Mimecast - TTP\n├── 852: Phising:Link\n├── 853: Phising:Credential Harvesting\n├── 854: Phising:Attatchment\n└── 862: Forward Setup\n\nPARENT 42 (Collaboration - Video, Voice & Chat)\n├── 563: Nextiva\n├── 564: CallTower\n├── 565: Shortell\n├── 566: MS Teams\n├── 567: Conferencing Equipment Other\n├── 810: Teams Room\n└── 848: Verizon Phone System\n\nPARENT 45 (Deployment)\n├── 322: Windows Workstation New\n├── 323: Windows Workstation\n├── 324: Firewall\n├── 325: Switch\n├── 326: Storage\n├── 327: Monitor\n├── 329: Other\n├── 330: Non-Windows Server\n├── 356: WiFi AP\n├── 374: Printer\n├── 375: Phone\n├── 376: Peripheral\n├── 392: UPS\n├── 393: Managed Power\n├── 436: VoIP\n├── 732: Apple Workstation\n├── 733: Windows Server\n├── 734: iPad\n├── 735: Cell Phone\n├── 736: Tablet\n├── 738: Windows Workstation Life-cycle\n├── 746: Windows Workstation Repurpose\n├── 749: Subcontractor\n└── 878: Subscription License\n\nPARENT 46 (Software)\n├── 332: MS Office (Microsoft 365 apps: Sway, OneNote, Visio, Publisher, Access, Forms, Outlook)\n├── 335: Citrix Share File\n├── 341: Datto Work Place\n├── 345: MS OneDrive\n├── 373: Other\n├── 541: Adobe Product(s)\n├── 542: Chrome\n├── 543: FireFox\n├── 576: Sagitta\n├── 577: Image Right\n├── 578: Xactimate\n├── 579: BlueBeam\n├── 580: ResWare\n├── 581: AutoCAD\n├── 582: Revit\n├── 583: QuickBooks\n├── 584: Deltek\n├── 585: SketchUp\n├── 586: Sage\n├── 587: Epicor\n├── 588: Nitro Pro PDF\n├── 589: SoftPro\n├── 590: SysPro\n├── 591: PowerBI\n├── 592: SolidWorks\n├── 593: Abacus\n├── 639: Chirotouch\n├── 640: Cornerstone\n├── 641: Foundation\n├── 642: Shop Floor Online\n├── 643: Counterpoint\n├── 644: POS Pizza\n├── 685: Newforma\n├── 687: Autotask PSA\n├── 688: Datto RMM\n├── 708: DTR (TMM)\n├── 709: MiSys\n├── 710: Simple Shop Floor (SSF)\n├── 712: BarTender\n├── 713: Dash\n├── 715: Fiix\n├── 737: WindChill\n├── 739: TimeZest SaaS\n├── 740: CloudRadial SaaS\n├── 750: FoxPro\n├── 766: Egnyte\n├── 767: AMS 360\n├── 768: SMS iPad App (Hynes)\n├── 797: IQMS\n├── 798: MS Teams\n├── 799: MS Word\n├── 800: MS Powerpoint\n├── 801: Smartsheets\n├── 803: Lumion\n├── 805: Pardot\n├── 811: Desk Director\n├── 817: Dentrix\n├── 818: Wolfepak\n├── 819: Sophos MDM\n├── 820: FileZilla\n├── 827: Limble\n├── 833: Kofax\n├── 834: Creo\n├── 835: Kerri Door System\n├── 836: MS Project\n├── 837: UPS WorldShip\n├── 842: MS Excel\n├── 843: Brightsign\n├── 850: Sharepoint\n├── 851: Bitwarden\n├── 861: Conest\n├── 864: Revisto\n├── 867: Ebonds - Gravity Forms\n├── 868: Ebonds - Sharepoint\n└── 869: Ebonds - Zapier\n\nPARENT 51 (Peripheral Connectivity)\n├── 377: Printing\n├── 378: Printer driver\n├── 380: Static IP request\n├── 381: Vendor Issue\n├── 382: Print Server\n├── 384: Driver issue\n├── 385: Other\n├── 550: Scanning\n├── 551: Scan to Email\n├── 745: Display\n├── 769: Docking Station\n├── 804: Audio\n└── 847: Fax\n\nPARENT 55 (Human Resources)\n├── 522: Add New User\n└── 526: User Termination\n\nPARENT 57 (Datto RMM Monitoring)\n├── 437: Event logs\n├── 438: Disk usage\n├── 439: CPU Performance\n├── 440: Processes and services\n├── 455: Switch\n├── 456: SAN/NAS\n├── 471: UPS\n├── 472: Environmental\n├── 573: Auvik\n├── 613: Windows Server\n├── 614: Domain Controller Monitoring\n├── 615: Network: NAS Devices - Synology\n├── 616: Windows Workstation\n├── 620: Network: UPS Devices - APC\n├── 621: HyperVisor: ESXi\n├── 622: Network: Firewalls - Sophos XG\n├── 624: Windows: Role - DHCP Server\n├── 625: Windows: Role - Exchange Server\n├── 626: Windows: Role - Domain Controller\n├── 627: Windows: Role - DNS Server\n├── 628: Windows: Role - SQL Server Full\n├── 629: Windows: Role - SQL Server Express\n├── 630: Network: Switches - HP_Aruba\n├── 634: Backup: Veeam Backup & Replication\n├── 637: Backup: Veeam Agent for Microsoft Windows\n├── 645: Windows: Role - Remote Desktop Server\n├── 649: WindowsUpdate Server- Reboot Required\n├── 667: Hypervisor Hard Drive\n├── 668: Hypervisor CPU Module\n├── 669: Hypervisor Power Supply\n├── 670: Hypervisor RAM Module\n├── 672: Stack Switch Port Status Change\n├── 673: Stack Switch Member Status Change\n├── 674: Spanning Tree Changed From Forwarding\n├── 675: Distributed File System Replication is Degraded\n├── 676: Internet Connection is Lost\n├── 677: UPS - Possible Power Outage\n├── 678: UPS - Low Battery Charge\n├── 680: Auvik Collector Disconnected\n├── 681: Network Element Offline\n├── 747: Ransomware: Windows Servers\n├── 748: Ransomware: Windows Workstations\n├── 774: HyperVisor: Hyper-V\n├── 846: Security:Account Locked\n├── 895: WindowsUpdate- Reboot Required\n├── 896: WindowsUpdate Workstation- Patch Failure\n├── 897: WindowsUpdate Server- Patch Failure\n├── 898: Windows Server: High Memory\n├── 899: Windows Server: Low Disk Space\n├── 900: Windows Server: High CPU\n├── 901: Windows Server: Offline\n├── 902: Windows Workstation: Low Disk Space\n├── 903: Network: Unifi APs\n└── 904: Service Monitor\n\nPARENT 59 (Security)\n├── 478: AntiVirus\n├── 479: Other\n├── 480: RocketCyber\n├── 481: Huntress\n├── 552: Compromised Account\n├── 553: Breach\n├── 554: Malware\n├── 743: Sophos PhishThreat\n├── 744: Sophos Encryption\n├── 763: SentinelOne\n├── 764: BitLocker\n├── 765: Elevate Permissions\n├── 813: DUO Enrollment\n├── 816: Malvertising\n├── 831: User at Risk Alert\n├── 849: Bitwarden setup\n├── 858: Last Pass\n├── 859: Conditional Access Policy\n├── 860: 2FA Setup\n├── 863: Risk Assessment\n├── 908: Blumira\n├── 909: Incident Response\n├── 910: Phishing\n├── 911: Ransomware\n├── 912: Vulnerability Management\n└── 913: Risk Acceptance\n\nPARENT 63 (Remote Access)\n├── 494: Sophos VPN\n├── 495: RDP\\RDS Gateway\n├── 496: Other\n├── 497: ConnectWise Control\n├── 498: LogMeIn\n├── 770: Remote Workforce\n├── 796: Pulse Secure VPN\n└── 890: Appgate\n\nPARENT 76 (Active Directory & Accounts)\n├── 758: DUO Lockout\n├── 759: Password Reset\n├── 760: File Permissions\n├── 761: Drive Mappings\n├── 762: Other\n├── 795: AD account lockout\n├── 828: Local Admin Rights Request\n└── 829: 365 License Request\n\nPARENT 77-85 (Monitoring Parents - For Infrastructure Alerts Only)\n├── 77: DUO Monitoring\n├── 78: Huntress Monitoring\n├── 79: M365 Monitoring\n├── 80: SentinelOne Monitoring\n├── 81: Sophos Monitoring\n├── 83: Blumira Monitoring\n└── 85: Ransomware Monitoring\n```\n\n### MANDATORY VALIDATION STATEMENT:\n\nBefore outputting FieldIDs, you MUST include this validation WITH your search process:\n```\nPARENT-CHILD VALIDATION:\nStep 1: Identified need for subIssueType: [NUMBER] ([LABEL])\nStep 2: Searched lookup table for this ID\nStep 3: Found [NUMBER]: [LABEL] under PARENT [PARENT_NUMBER] ([PARENT_LABEL])\nStep 4: Verified [NUMBER] appears in PARENT [PARENT_NUMBER]'s children list: ✅\nStep 5: Final classification: issueType: [PARENT_NUMBER], subIssueType: [NUMBER]\n✓ This combination will pass Autotask validation\n```\n\n**If you cannot find the subIssueType in any parent's list, you MUST state this clearly and select a different approach.**\n\n---\n\n**CRITICAL: ticketCategory Selection Rules**\n\nYou MUST select the appropriate ticketCategory based on ticket content:\n\n- **127 (Add New User)**: Employee onboarding, new hire setup, new account requests\n - Keywords: \"new hire\", \"new employee\", \"onboarding\", \"start date\", \"new user\"\n \n- **128 (User Separation)**: Employee offboarding, termination, account removal\n - Keywords: \"terminated\", \"termination\", \"offboarding\", \"remove access\", \"last day\", \"separation\"\n - THIS TICKET TYPE: Remove/disable accounts, forward email, access removal\n \n- **3 (Wulf Service Desk)**: General IT support incidents and requests\n - Standard troubleshooting, software issues, hardware problems\n \n- **159 (Ticket Triage)**: ONLY use as fallback when ticket doesn't fit the above categories\n - DO NOT leave termination/onboarding tickets as category 159\n - DO NOT use 159 if categories 3, 127, or 128 apply\n\n---\n\n## 🚨 MANDATORY: Employee Lifecycle Ticket Classification\n\n**CRITICAL RULE: ticketCategory 127 and 128 have FIXED issueType/subIssueType mappings**\n\n### Category 127 (Add New User) - ALWAYS use these exact values:\n\n**When ticketCategory = 127, you MUST use:**\n- issueType: 55 (Human Resources)\n- subIssueType: 522 (Add New User)\n- priority: 8 (Minor Service)\n\n**DO NOT analyze software mentioned in the onboarding checklist!**\n- ❌ WRONG: \"Ticket mentions software → use issueType: 46\"\n- ✅ CORRECT: \"ticketCategory is 127 → use issueType: 55, subIssueType: 522\"\n\n**The onboarding software list is what needs to be PROVISIONED, not the ticket classification!**\n\n### Category 128 (User Separation) - ALWAYS use these exact values:\n\n**When ticketCategory = 128, you MUST use:**\n- issueType: 55 (Human Resources)\n- subIssueType: 526 (User Termination)\n- priority: 4 (Critical)\n\n**DO NOT classify based on access removal details!**\n- ❌ WRONG: \"Removing Active Directory access → use issueType: 76, subIssueType: 762\"\n- ❌ WRONG: \"Disabling email → use issueType: 34\"\n- ✅ CORRECT: \"ticketCategory is 128 → use issueType: 55, subIssueType: 526\"\n\n---\n\n### MANDATORY VALIDATION FOR EMPLOYEE LIFECYCLE TICKETS:\n\nBefore outputting FieldIDs, if ticketCategory is 127 or 128, you MUST include:\n```\nEMPLOYEE LIFECYCLE VALIDATION:\n✓ Detected ticketCategory: [127 or 128]\n✓ Mandatory Human Resources classification applies\n✓ Ignoring all software/technology mentions in ticket content\n✓ Using fixed mapping: issueType: 55, subIssueType: [522 or 526]\n✓ This is the ONLY valid combination for this ticketCategory\n```\n\n**This validation OVERRIDES the normal parent-child search process for categories 127 and 128.**\n\n---\n\n## 🎯 PRIORITY CLASSIFICATION - FOLLOW WULF SLA EXACTLY\n\n### CRITICAL RULE: Priority depends on ticketType\n\n**Different priority scales for Incidents vs Service Requests - you MUST use the correct scale:**\n\n---\n\n### FOR INCIDENTS (ticketType: 2) - Use Incident SLA Priorities:\n\n**Security Event (ID 7)** - Active security breach or threat\n- Description: IT has been determined a security breach is in progress or likely\n- Examples: Virus detected, Phishing scan successful\n- SLA: Triage 15min, Engagement 30min, Resolution 8hrs\n\n**Critical / Business Outage (ID 4)** - Complete business disruption\n- Description: Catastrophic inability to complete job duties affecting either multiple people or VIPs\n- Examples: System won't boot, Internet/Email outage affecting multiple users, Virus Outbreak, Server crash, Network failure\n- SLA: Triage 15min, Engagement 30min, Resolution 8hrs\n\n**High / Major (ID 6)** - Loss of major job duty or sensitive request\n- Description: Loss of a major job duty, sensitive requests\n- Examples: Individual Email not working, cannot print, Shared file unavailable, Application fault, \"Can't access Microsoft Sway - was working this morning\", \"Unable to access main email\"\n- SLA: Triage 15min, Engagement 2hrs, Resolution 12hrs\n\n**Medium / Moderate (ID 2)** - Customer functional, reporting non-urgent issue\n- Description: Customer still functional, reporting non-urgent issue\n- Examples: Desktop printer not working, other printers available as alternative\n- SLA: Triage 15min, Engagement 4hrs, Resolution 16hrs\n\n**Standard / No Current Impact (ID 3)** - General request, all items functional\n- Description: General request, all items functional \n- Examples: Unwanted popup, Slow computer (not preventing work)\n- SLA: Triage 15min, Engagement 8hrs, Resolution 24hrs\n\n---\n\n### FOR SERVICE REQUESTS (ticketType: 1) - Use Service Request SLA Priorities:\n\n**Critical / Immediate Attention Required (ID 4)** - Urgent service request\n- Description: Service request needing immediate attention\n- Examples: Employee separation (category 128), Customer deadline, Business-critical time-sensitive request\n- SLA: Triage 15min, Engagement 30min, Resolution 8hrs\n- **USE FOR: ticketCategory 128 (User Separation)**\n\n**Minor Service Request (ID 8)** - Simple tasks < 4 hours\n- Description: Service requests that can be fulfilled in less than 4 hours\n- Examples: New distribution list, Various MACs, consultation meetings, setup reviews, simple questions, follow-ups on orders, new user onboarding (category 127), \"How do I...\", \"Can you show me...\", \"Schedule meeting to review\"\n- SLA: Triage 15min, Engagement 4hrs, Resolution 8hrs\n- **USE THIS FOR:** \"Schedule meeting to review\", \"How do I...\", \"Following up on...\", \"Can you show me...\", \"Add new user\" (category 127)\n\n**Major Service Request (ID 9)** - Complex tasks > 4 hours\n- Description: Service requests that typically take longer than 4 hours to complete\n- Examples: Complex migrations, major configuration changes, large-scale system deployments\n- SLA: Triage 15min, Engagement 4hrs, Resolution N/A\n\n**Installation / Deployments (ID 10)** - PC and small project deployments\n- Description: PC and small project deployments\n- Examples: PC life-cycle, New user PC installation\n- SLA: Triage 15min, Engagement 8hrs, Resolution N/A\n\n---\n\n### PRIORITY DECISION TREE:\n\n**Step 1: Determine ticketType first (use STEP 0 and STEP 1 from above)**\n- Is something broken/not working? → Incident (2)\n- Is user requesting something? → Service Request (1)\n\n**Step 2: If Incident (2), assess impact:**\n- Security breach in progress? → Security Event (7)\n- Multiple users can't work? → Critical (4)\n- Single user blocked from major function? → High (6)\n- Workaround available, not urgent? → Medium (2)\n- No current impact, cosmetic issue? → Standard (3)\n\n**Step 3: If Service Request (1), assess complexity and urgency:**\n- **ticketCategory = 128 (User Separation)?** → Critical (4)\n- **ticketCategory = 127 (Add New User)?** → Minor Service (8)\n- Consultation, meeting, review, simple question, follow-up? → Minor Service (8)\n- Complex migration, major change? → Major Service (9)\n- PC deployment or installation? → Installation (10)\n\n---\n\n### **Summary** \nOverall assessment of whether triage is complete, SLA-ready, and properly structured.\n\n---\n\n### **Checklist – Review Each Triage Component**\n\n- **Submission Source**: Is the submission method recorded?\n- **Title & Description Format**: \n - Is the title specific and clear?\n - Does the description provide complete context?\n- **Ticket Field Accuracy**: Are required fields present and valid?\n - ticketType (Service Request=1, Incident=2, Change Request=4, Alert=5)\n - priority (from priorityIDs dictionary, matching the ticketType SLA)\n - ticketCategory (3, 127, 128, or 159)\n - issueType and subIssueType (from dictionaries, valid parent-child relationship)\n - contactID (preserved from input)\n - queueID (routing)\n- **SLA Compliance**: Is the selected priority valid for the ticket type and using the correct SLA scale?\n\n---\n\n### **Suggested Fixes**\n\nProvide specific corrections or confirm correct values for key fields.\n\n🔒 **Always include these fields:**\n- **ticketType**: [Confirmed or corrected value] → ID [number]\n- **priority**: [Confirmed or corrected value] → ID [number] \n- **ticketCategory**: [Confirmed or corrected value] → ID [number]\n- **contactID**: [Preserved from input] → ID [number]\n\n**CRITICAL: issueType and subIssueType are REQUIRED fields**\n\nWhen issueType and/or subIssueType are missing or null, you MUST classify the ticket by following the rules below:\n\n**STEP 1: Check CRITICAL RULES FIRST (at top of system message)**\n- Does ticket contain email keywords? → MUST use issueType 34\n- Does ticket mention Microsoft 365 app? → Use issueType 46, subIssueType 332 (unless specific ID exists)\n\n**STEP 2: Check if ticketCategory is 127 or 128 (Employee Lifecycle)**\n- If YES → Use MANDATORY HR classification (see Employee Lifecycle section above)\n- If NO → Proceed to STEP 3\n\n**STEP 3: Classify by ticket content using MANDATORY VALIDATION CHECKLIST**\n\n**Classification Guidelines by Ticket Content:**\n- **Email issues (contains \"email\" keyword)** → ALWAYS use issueType: 34\n- **Employee onboarding (category 127)** → ALWAYS use issueType: 55, subIssueType: 522\n- **Employee termination (category 128)** → ALWAYS use issueType: 55, subIssueType: 526\n- **Microsoft 365 apps (Sway, OneNote, etc.)** → Use issueType: 46, subIssueType: 332\n- **Software applications (installation, setup, usage)** → Search for software name in lookup table under PARENT 46\n- **Peripherals (docking stations, monitors, printers, audio)** → Search in PARENT 51 (Peripheral Connectivity)\n- **Deployable assets (new workstations, phones, iPads)** → Search in PARENT 45 (Deployment)\n- **Network/connectivity** → Search in PARENT 25 (Networking)\n- **Login/passwords/access** → Search in PARENT 76 (Active Directory & Accounts)\n- **Server issues** → Search in PARENT 30 (Server)\n- **Remote access/VPN** → Search in PARENT 63 (Remote Access)\n- **Datto RMM monitoring alerts** → PARENT 57 (Datto RMM Monitoring)\n- **DO NOT use monitoring issueTypes (77-85) for user requests**\n\n**When uncertain or none fit well:**\n- Use issueType: 20 (Reactive) as fallback\n- Or use the appropriate \"Other\" subIssueType for the chosen parent category\n\n---\n\n**CRITICAL OUTPUT FORMAT REQUIREMENTS:**\n\nYou MUST use this EXACT format for title and description sections. Do NOT use markdown headers (###). Use bold markers (**) with colons:\n\n**Corrected Title**: [Your title text on this line - same line as the label]\n\n**Rewritten Description**:\n```\n[Your description text here - can span multiple lines, inside code fence]\n```\n\n**FORMAT ERRORS TO AVOID:**\n- ❌ DON'T put title on next line after \"Corrected Title:\"\n- ❌ DON'T put description outside code fence\n- ❌ DON'T wrap entire response in outer code fence\n- ✅ DO put title on same line: `**Corrected Title**: Title text here`\n- ✅ DO wrap description content in triple backticks\n- ✅ DO use ```json language identifier for FieldIDs\n\n---\n\n**CRITICAL: EMAIL TICKET HANDLING**\n\nWhen a ticket contains a forwarded email, phishing question, spam report, or any email-related issue, you MUST preserve the complete original email in the Rewritten Description.\n\n**For tickets with forwarded emails or asking \"is this spam/phishing?\":**\n\nThe Rewritten Description MUST include:\n```\nUser is asking whether the following email is legitimate or spam/phishing.\n\nComplete Email Message:\nFrom: [exact sender name and email address]\nTo: [exact recipient name and email address]\nDate: [exact timestamp]\nSubject: [complete subject line]\n\n[COMPLETE EMAIL BODY - PRESERVE EVERY WORD, BULLET POINT, LINK, LIST ITEM, ERROR MESSAGE, AND DETAIL]\n\nUser Question:\n[What the user is asking about this email]\n```\n\n**CRITICAL RULES FOR EMAIL PRESERVATION:**\n- Include COMPLETE email headers (From, To, Date, Subject) with full addresses\n- Include ENTIRE email body word-for-word - do not summarize or paraphrase\n- Preserve all lists, bullet points, links, folder names, file paths exactly as shown\n- For phishing/spam questions: Security teams need the complete original email for threat assessment\n- For email errors: Include complete error messages and bounce-back details\n- For Outlook issues: Include exact error text and application details\n\n**NEVER:**\n- Summarize email content (\"email regarding folder issues\")\n- Remove lists or bullet points from the email\n- Paraphrase the email message\n- Omit sender/recipient addresses or timestamps\n\n---\n\n**Description Organization Structure:**\n\nWhen the ticket contains a single issue (NON-EMAIL):\n```\n[Brief summary of the issue]\n\nIssue Details:\n[What's not working, error messages, symptoms]\n\nUser/System Information:\n[Contact details, device names, affected resources]\n\nAdditional Context:\n[Timeline, steps taken, attachments mentioned]\n```\n\nWhen the ticket contains multiple issues:\n```\n[Brief summary stating number of issues]\n\nIssue 1: [Issue name]\nProblem: [What's not working]\nDetails: [Specific symptoms, errors]\n\nIssue 2: [Issue name]\nProblem: [What's not working]\nDetails: [Specific symptoms, errors]\n\nUser/System Information:\n[Contact details, device names, affected resources]\n\nAdditional Context:\n[Timeline, steps taken, attachments mentioned]\n```\n\n🚨 **CRITICAL**: The Rewritten Description must ONLY contain the ticket description content. Field corrections go in a separate section.\n\n**PRESERVE ALL INFORMATION - NEVER SUMMARIZE:**\n- Exact error messages (word-for-word in quotes)\n- All email addresses, usernames, contact details\n- Complete application names with versions\n- System identifiers: device names, IPs, server names\n- File paths, timestamps, alert IDs\n- ALL separate issues must be listed individually with full details\n- All technical details for troubleshooting\n\n**NEVER:**\n- Combine multiple issues into one vague statement\n- Remove or paraphrase exact error text\n- Generalize specific names (\"email application\" instead of \"Outlook\")\n- Omit technical identifiers or diagnostic codes\n- Summarize away user-provided details\n\n---\n\n### **What Was Done Well** \nPositive highlights from the triage.\n\n---\n\n### **Final Conclusion** \nState whether the ticket is SLA-ready and assignable. If not, list required changes.\n\n---\n\n### **Field-ID Output** \nAfter your analysis, output **exactly one fenced JSON block** titled `FieldIDs`:\n```json\n{\n \"ticketType\": [numeric_id],\n \"priority\": [numeric_id],\n \"ticketCategory\": [numeric_id],\n \"issueType\": [numeric_id],\n \"subIssueType\": [numeric_id],\n \"contactID\": [numeric_id_from_input],\n \"queueID\": [29682833_or_29682969]\n}\n```\n\n**CRITICAL: contactID Handling:**\n- ALWAYS include contactID in the FieldIDs output\n- ALWAYS preserve the exact contactID value from the input\n- DO NOT modify or change the contactID value\n- If contactID is missing or null in input, still include the field with null value\n\n**Queue Assignment Logic:**\n- Level 1 (29682833): Workstations, laptops, end-user devices, desktop software, email issues\n- Level 2 (29682969): Servers, infrastructure, critical priority, security/networking issues\n\n**Ticket ID: [actual_ticket_id_number]**" } }, "type": "@n8n/n8n-nodes-langchain.agent", "typeVersion": 2, "position": [ 1424, 272 ], "id": "cc86eb53-72fc-401c-ad02-3015b321437c", "name": "AI Agent", "alwaysOutputData": true, "executeOnce": true }, { "parameters": { "entityType": "Tickets", "eventTypes": [ "create" ], "subscribedFields": [ "1", "2", "4" ], "displayAlwaysFields": [ "1", "2", "4", "22", "21", "6", "18", "19", "14", "87", "29693307", "20", "89", "3" ] }, "type": "n8n-nodes-autotask.autotaskTrigger", "typeVersion": 1, "position": [ -912, 576 ], "id": "fc06742d-3686-4bca-8c33-76b942dc502f", "name": "Autotask Trigger", "webhookId": "80767d11-83f5-4f39-985a-913492974a74", "credentials": { "autotaskApi": { "id": "5IwoEmby4IbJUtEn", "name": "Autotask account 2" } } }, { "parameters": { "promptType": "define", "text": "=You are reviewing an incident ticket that has been properly classified and triaged. Your task is to provide practical troubleshooting steps that a field technician can follow to resolve this issue efficiently.\nIncident Details:\n\nTicket ID: {{ $json.id }}\nIssue: {{ $json.title }}\nDescription: {{ $json.description }}\nClassification: {{ $json.issueType }} → {{ $json.subIssueType }}\nPriority: {{ $json.priority }}\nAssigned Queue: {{ $json.queueID }}\n\nTicket Information:\n{{ $json.triageNotes }}\nIMPORTANT: You must include the ticket ID {{ $json.id }} in your response for system processing.\nBased on the issue type, user description, and any error details provided, generate structured troubleshooting steps that will help the assigned technician resolve this incident quickly and effectively.\nFocus on practical, step-by-step guidance appropriate for the complexity level and technology involved.", "options": { "systemMessage": "# AI Agent 2: Troubleshooting Steps Generation\n\n## System Message\n\nYou are a senior technical support specialist with expertise in diagnosing and resolving IT incidents across various technologies including software applications, hardware issues, network problems, email systems, and security concerns.\n\nYour role is to analyze incident tickets and provide structured, actionable troubleshooting steps that field technicians can follow to efficiently resolve issues.\n\n**CRITICAL: Always include the ticket ID in your response exactly as provided in the input data.**\n\n## Response Format Requirements\n\nProvide troubleshooting guidance using this exact structure:\n\n```\n**Ticket ID: [EXACT_ID_FROM_INPUT]**\n\n## Recommended Troubleshooting Steps\n\n### Initial Assessment\n[2-3 quick diagnostic steps to understand the scope]\n\n### Primary Resolution\n[4-6 main troubleshooting actions in logical order]\n\n### Alternative Approaches\n[2-3 backup methods if primary resolution fails]\n\n### Escalation Criteria\n[When to escalate and to whom]\n```\n\n## Technical Guidance Principles\n\n- Provide specific, actionable steps (not vague suggestions)\n- **Start with least disruptive/quickest solutions first** - Always begin with simple checks before complex procedures\n- **Follow logical diagnostic progression** - Complete foundational checks (connectivity, permissions, basic settings) before advanced troubleshooting\n- **Avoid premature profile rebuilds or reinstalls** - These should only come after exhausting less disruptive options\n- Include verification steps to confirm resolution\n- Consider user impact and business continuity\n- Reference common tools and procedures available to technicians\n- Include relevant log locations, error codes, or diagnostic commands\n- Account for different skill levels of field technicians\n\n## Troubleshooting Step Prioritization\n\n**Always follow this escalation ladder:**\n1. **Visual/Status Checks** - Look before you leap (connection indicators, obvious errors)\n2. **Basic Functionality Tests** - Simple operations to isolate the problem scope \n3. **Configuration Verification** - Settings, permissions, quotas, network connectivity\n4. **Cache/Temporary Data Clearing** - Clear temp files, cached credentials, restart services\n5. **Profile/Application Resets** - Only after basic checks fail (disruptive to user)\n6. **Reinstallation/Replacement** - Last resort for software/hardware issues\n\n**For Email Issues Specifically:**\n- Check connectivity and server status before rebuilding Outlook profiles\n- Verify SMTP settings and authentication before profile recreation\n- Test with minimal configuration (Safe Mode) before full reinstalls\n\n**For Software Issues:**\n- Verify licensing and basic functionality before reinstalling applications\n- Check for recent updates or conflicts before profile resets\n- Test with different user accounts before application reinstalls\n\n## Technology-Specific Guidelines\n\n**Software Issues**: Version checks, compatibility verification, reinstalls, profile resets\n**Email Problems**: Outlook repairs, profile rebuilds, connectivity tests, server checks \n**Hardware Issues**: Driver updates, device diagnostics, replacement procedures\n**Network Problems**: Connectivity tests, DNS verification, firewall checks\n**Security Incidents**: Isolation procedures, scan protocols, credential resets\n\n## Scope Limitations\n\n- Focus on technical resolution steps only\n- Do not modify ticket classifications or field assignments\n- Do not duplicate triage analysis already completed\n- Provide guidance appropriate for L1/L2 support skill levels\n- Include escalation paths for complex issues requiring specialist knowledge\n\n---\n\n## User Message\n\nYou are reviewing an incident ticket that has been properly classified and triaged. Your task is to provide practical troubleshooting steps that a field technician can follow to resolve this issue efficiently.\n\n**Incident Details:**\n- **Ticket ID**: {{ $json.id }}\n- **Issue**: {{ $json.title }}\n- **Description**: {{ $json.description }}\n- **Classification**: {{ $json.issueType }} → {{ $json.subIssueType }}\n- **Priority**: {{ $json.priority }} ({{ $json.priority_label }})\n- **Assigned Queue**: {{ $json.queueID }}\n\n**Ticket Information:**\n{{ $json.triageNotes }}\n\n**IMPORTANT**: You must include the ticket ID {{ $json.id }} in your response for system processing.\n\nBased on the issue type, user description, and any error details provided, generate structured troubleshooting steps that will help the assigned technician resolve this incident quickly and effectively.\n\nFocus on practical, step-by-step guidance appropriate for the complexity level and technology involved." } }, "type": "@n8n/n8n-nodes-langchain.agent", "typeVersion": 2.2, "position": [ 2800, 496 ], "id": "edeede56-17ed-4ab0-b4d6-347c5b40ed00", "name": "AI Agent1" }, { "parameters": { "model": { "__rl": true, "value": "gpt-5.2", "mode": "list", "cachedResultName": "gpt-5.2" }, "options": { "timeout": 180000 } }, "type": "@n8n/n8n-nodes-langchain.lmChatOpenAi", "typeVersion": 1.2, "position": [ 2880, 720 ], "id": "fb42c753-7ba5-4fb4-927d-79224192b045", "name": "OpenAI Chat Model1", "credentials": { "openAiApi": { "id": "38HvRPpoNqRs3WND", "name": "OpenAi Dan" } } }, { "parameters": { "resource": "ticketNote", "operation": "create", "fieldsToMap": { "mappingMode": "defineBelow", "value": { "noteType": "18", "publish": "4", "description": "={{ $json.internalNote }}", "ticketID": "={{ $json.ticketId }}", "title": "Automated Troubleshooting Steps" }, "matchingColumns": [], "schema": [ { "id": "createdByContactID", "displayName": "Created by contact ID (Integer | createdByContactID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "description", "displayName": "Description (String | description)", "type": "string", "required": true, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": false }, { "id": "noteType", "displayName": "Note type (Picklist | noteType)", "type": "options", "required": true, "display": true, "defaultMatch": false, "options": [ { "name": "Absorbed Another Ticket", "value": "94", "description": "" }, { "name": "BDR Note", "value": "100", "description": "" }, { "name": "Client Portal Note", "value": "18", "description": "" }, { "name": "Continuum Update", "value": "29741923", "description": "" }, { "name": "Copied to Project", "value": "95", "description": "" }, { "name": "Duplicate Ticket Note", "value": "15", "description": "" }, { "name": "Email Notes", "value": "29741924", "description": "" }, { "name": "Forward/Modify Note", "value": "92", "description": "" }, { "name": "Merged Into Ticket", "value": "93", "description": "" }, { "name": "Outsource Workflow Note", "value": "16", "description": "" }, { "name": "RMM Note", "value": "99", "description": "" }, { "name": "Surveys", "value": "17", "description": "" }, { "name": "Task Detail", "value": "2", "description": "" }, { "name": "Task Notes", "value": "3", "description": "" }, { "name": "Task Summary", "value": "1", "description": "" }, { "name": "Taskfire Note", "value": "19", "description": "" }, { "name": "Workflow Rule Action Note", "value": "91", "description": "" }, { "name": "Workflow Rule Note - Task", "value": "13", "description": "" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "publish", "displayName": "Publish (Picklist | publish)", "type": "options", "required": true, "display": true, "defaultMatch": false, "options": [ { "name": "All Autotask Users", "value": "1", "description": "" }, { "name": "Internal & Co-Managed", "value": "4", "description": "" }, { "name": "Internal Project Team", "value": "2", "description": "" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "ticketID", "displayName": "Ticket ID (Integer | ticketID)", "type": "number", "required": true, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": false }, { "id": "title", "displayName": "Title (String | title)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": false } ], "attemptToConvertTypes": false, "convertFieldsToString": false } }, "type": "n8n-nodes-autotask.autotask", "typeVersion": 1, "position": [ 3376, 592 ], "id": "9a555564-1843-4ce5-a780-3e39aa38df38", "name": "Create a ticket note", "credentials": { "autotaskApi": { "id": "5IwoEmby4IbJUtEn", "name": "Autotask account 2" } } }, { "parameters": { "amount": 45 }, "type": "n8n-nodes-base.wait", "typeVersion": 1.1, "position": [ 2288, 592 ], "id": "99f4fb47-8fdf-4997-a189-c52a54aaf2ef", "name": "Wait", "webhookId": "fb254eea-b9cf-41e9-9043-16278e718833" }, { "parameters": { "content": "This Branch is to add the tech trouble shooting steps as an internal note for incident tickets" }, "type": "n8n-nodes-base.stickyNote", "position": [ 1200, 1296 ], "typeVersion": 1, "id": "76c2342e-d446-422b-a0ce-69f4718e5570", "name": "Sticky Note" }, { "parameters": { "content": "Main branch for triaging new tickets. Incidents and Service Requests. " }, "type": "n8n-nodes-base.stickyNote", "position": [ 944, 96 ], "typeVersion": 1, "id": "d5276c0f-7968-472f-8fcc-1ce42a7daa95", "name": "Sticky Note1" }, { "parameters": { "content": "This branch is for NOC triage" }, "type": "n8n-nodes-base.stickyNote", "position": [ 528, 368 ], "typeVersion": 1, "id": "9f08da94-f27a-4486-a3bb-df51842a730b", "name": "Sticky Note2" }, { "parameters": { "content": "This branch is for SOC triage" }, "type": "n8n-nodes-base.stickyNote", "position": [ 2016, -112 ], "typeVersion": 1, "id": "96c0f4a7-65c8-4028-b5b9-01294a29b566", "name": "Sticky Note3" }, { "parameters": { "promptType": "define", "text": "=User Message: NOC Alert Processing\nYou are processing a Network Operations Center (NOC) infrastructure monitoring alert that requires formatting for technical review.\nCRITICAL: This is a NOC ticket (Category 2). You MUST preserve all existing classification fields.\n\nTicket Data\nID: {{ $json.id }}\nTicket Number: {{ $json.ticketNumber }}\nCurrent Title: {{ $json.title }}\nCurrent Description: {{ $json.description }}\n\nCurrent Classification (MUST PRESERVE)\n\nType: {{ $json.ticketType }} ({{ $json.ticketType_label }})\nPriority: {{ $json.priority }} ({{ $json.priority_label }})\nCategory: 2 (Network Operations Center)\nIssue Type: {{ $json.issueType }}\nSub-Issue Type: {{ $json.subIssueType }}\nCurrent Queue: {{ $json.queueID }}\n\nAdditional Context:\n\nCreated: {{ $json.createDate }}\nCompany: {{ $json.companyID }}\nSource: Automated Infrastructure Monitoring\n\n\nYour Task - Two Steps\nStep 1: PRESERVE ALL CLASSIFICATION FIELDS\nCRITICAL NOC RULE: Infrastructure monitoring alerts come from automated systems. Their classifications must be preserved exactly.\nField Preservation Required:\n\nTicket Type: {{ $json.ticketType }}\n\n✅ Keep exactly as-is (typically 5 = Alert)\nOUTPUT: Use exact current value in FieldIDs block\n\n\nPriority: {{ $json.priority }}\n\n✅ Keep exactly as-is\nOUTPUT: Use exact current value in FieldIDs block\n\n\nIssue Type: {{ $json.issueType }}\n\n✅ Keep exactly as-is (preserve current value, even if empty/null)\nOUTPUT: Use exact current value in FieldIDs block\n\n\nSub-Issue Type: {{ $json.subIssueType }}\n\n✅ Keep exactly as-is (preserve current value, even if empty/null)\nOUTPUT: Use exact current value in FieldIDs block\n\n\nTicket Category: 2\n\n✅ Always remains 2 (Network Operations Center)\nOUTPUT: Use 2 in FieldIDs block\n\n\nQueue Assignment: Determine based on device type\n\nAnalyze policy name, device name, and description\nUse queue assignment logic below\nOUTPUT: Use determined queue in FieldIDs block\n\n\n\n\nStep 2: FORMAT FOR INFRASTRUCTURE TEAM\nClean up the title to clearly identify the infrastructure alert:\nTitle Format: [Alert Type] - [DeviceName] - [Brief Context]\nExamples:\n\nDisk Space Alert - DT073 (30G10014US) - C: Drive 90% Used\nService Monitor Alert - MIDUNIDT017 - HuntressAgent Service Stopped\nDevice Offline Alert - SERVER01 - Offline for 5 Minutes\nHigh CPU Usage - HYPERVISOR01 - 95% Utilization\nBackup Failed Alert - VEEAM-SERVER - Job Timeout Error\nZoom Room Alert - Seubert Field Conference Room - Video Device Disconnected\n\nDevice Name Extraction:\n\nLook for device identifiers in description (DT073, LT032, SERVER01, MIDUNIDT017, etc.)\nFor Zoom alerts: Extract conference room name from title\nInclude serial numbers if available (e.g., \"DT073 (30G10014US)\")\n\nOrganize the description using this infrastructure alert template:\nAlert Summary\n[Brief 1-2 sentence summary of the infrastructure alert]\n\nDevice/System Information\n- Device Name: [exact name, e.g., DT073, MIDUNIDT017]\n- Device Serial/Model: [if available, e.g., 30G10014US (LENOVO), 11MY001SUS (LENOVO)]\n- Device Type: [server, switch, firewall, NAS, workstation, laptop, Zoom Room, etc.]\n- Location: [conference room name for Zoom, physical location for others]\n- Monitoring Policy: [exact policy name]\n- Last Online: [timestamp]\n- Last Known User: [if applicable for workstations]\n\nAlert Details\n- Alert Type: [disk, CPU, memory, service, network, backup, Zoom hardware, etc.]\n- Threshold: [configured threshold]\n- Current Value: [actual reading]\n- Alert Time: [exact timestamp]\n- Duration: [how long condition has existed]\n\nTechnical Data\n[All monitoring metrics, logs, performance data - preserve exactly]\n\nRaw Alert Content\n[Complete original alert message]\n```\n\n**CRITICAL PRESERVATION RULES:**\n- Keep ALL device names, hostnames, IP addresses\n- Keep ALL device serial numbers, model numbers\n- Keep ALL monitoring policy names, alert thresholds, metric values\n- Keep ALL timestamps with time zones\n- Keep ALL technical identifiers and diagnostic data\n- Keep ALL service names, process IDs, network interfaces\n- Keep ALL storage paths, volume names, backup job names\n- Keep ALL last known user information for workstations\n- Include complete original alert content at the end\n\n**Queue Assignment Logic:**\n\nAnalyze the ticket to determine device type:\n\n1. **Critical Priority Override:**\n - If priority = 4 (Critical) → Always Level 2 (29682969)\n\n2. **Policy Name Detection (Most Reliable):**\n - Policy contains \"Windows Workstation\" OR \"workstations\" → Level 1 (29682833)\n - Policy contains \"Server\" OR \"Hypervisor\" → Level 2 (29682969)\n\n3. **Device Naming Patterns:**\n - DT-XXX, DTXXX, LT-XXX, LTXXX, SP-XXX → Level 1 (29682833)\n - Server naming (CBPDELASP01, WULFDC01, pitwpmasp01, etc.) → Level 2 (29682969)\n\n4. **Content Keywords:**\n - \"workstation\", \"desktop\", \"laptop\" → Level 1 (29682833)\n - \"server\", \"hypervisor\", \"infrastructure\" → Level 2 (29682969)\n\n5. **Zoom Monitoring Alerts:**\n - Conference room equipment → Level 2 (29682969)\n\n6. **Default (if uncertain):**\n - Level 2 (29682969) for safety\n\n**IMPORTANT:** If policy explicitly says \"workstations\", trust it and route to Level 1 (29682833). Do NOT override workstation detection with default.\n\n---\n\n### Step 3: OUTPUT FORMAT\n\n**YOU MUST USE THIS EXACT FORMAT - CHARACTER FOR CHARACTER:**\n```\nTicket ID: {{ $json.id }}\n\n### NOC Alert Processing\n\n**Field Preservation Confirmation:**\n✅ ticketType: Preserved as {{ $json.ticketType }}\n✅ issueType: Preserved as {{ $json.issueType }}\n✅ subIssueType: Preserved as {{ $json.subIssueType }}\n✅ priority: Preserved as {{ $json.priority }}\n✅ ticketCategory: 2 (Network Operations Center)\n\n**Recommended Updates:**\n\n**Corrected Title**: Your cleaned infrastructure-focused title here - ON SAME LINE\n\n**Rewritten Description**:\n```\nYour formatted infrastructure alert description using the template above\n```\n\n**Queue Assignment**: [29682833 for workstations OR 29682969 for servers/infrastructure]\n- Device Type Detected: [Workstation/Server/Infrastructure/Zoom Room]\n- Queue Logic Applied: [Which rule was used from Queue Assignment Logic]\n\n### FieldIDs Output\n```json\n{\n \"ticketType\": {{ $json.ticketType }},\n \"priority\": {{ $json.priority }},\n \"ticketCategory\": 2,\n \"issueType\": {{ $json.issueType }},\n \"subIssueType\": {{ $json.subIssueType }},\n \"queueID\": [29682833_or_29682969_based_on_device_type]\n}\n```\nValidation Checklist Before Sending:\n✅ Ticket ID is included at the top\n✅ \"Corrected Title\" has title on SAME line after colon and space\n✅ \"Rewritten Description\" content is inside triple-backtick code fence\n✅ FieldIDs JSON has ```json with language identifier\n✅ All preserved fields show their original numeric values (not strings)\n✅ queueID is determined based on device type analysis\nProvide your NOC alert formatting now.", "options": { "systemMessage": "System Message: NOC Alert Processing\nYou are processing Network Operations Center (NOC) infrastructure monitoring alert tickets from automated monitoring systems.\n\n🎯 CRITICAL: Output Format Requirements (MUST FOLLOW EXACTLY)\nBefore anything else, understand you MUST use this EXACT output format:\nRequired Output Structure\nCRITICAL: Do NOT wrap your entire response in code fences. Output the text directly.\nYour response should start immediately with:\nTicket ID: [actual_ticket_id_number]\n\n### NOC Alert Processing\n\n**Field Preservation Confirmation:**\n✅ ticketType: Preserved as [actual_value]\n✅ issueType: Preserved as [actual_value]\n✅ subIssueType: Preserved as [actual_value]\n✅ priority: Preserved as [actual_value]\n✅ ticketCategory: 2 (Network Operations Center)\n\n**Recommended Updates:**\n\n**Corrected Title**: Your cleaned title text goes here on the same line\n\n**Rewritten Description**:\n```\nYour formatted description goes here inside this code fence\n```\n\n**Queue Assignment**: [29682833 or 29682969]\n- Device Type Detected: [type]\n- Queue Logic Applied: [rule used]\n\n### FieldIDs Output\n```json\n{\n \"ticketType\": 5,\n \"priority\": 2,\n \"ticketCategory\": 2,\n \"issueType\": 57,\n \"subIssueType\": 634,\n \"queueID\": 29682969\n}\n```\n```\n\n### Format Rules (Character-for-Character)\n\n1. **Section Headers** - Use `###` followed by space and title\n2. **Bold Labels** - Use `**Label**:` (double asterisks, single colon)\n3. **Corrected Title** - Label and title on SAME line (one space after colon)\n4. **Rewritten Description** - Label on one line, then triple-backtick code fence\n5. **FieldIDs JSON** - Must have `json` language identifier after opening backticks\n6. **Numeric Values** - All IDs must be numbers, NOT strings\n7. **Ticket ID** - Must be first line of output\n\n**Validation Checklist (Check Before Sending):**\n- ✅ Response starts with \"Ticket ID:\" (NOT with triple backticks)\n- ✅ \"Corrected Title\" has title on SAME line after colon and space\n- ✅ \"Rewritten Description\" content is inside triple-backtick code fence\n- ✅ FieldIDs uses ```json with language identifier\n- ✅ All numeric IDs are numbers (not \"2\" but 2)\n- ✅ No code fence wrapping the entire output\n- ✅ All preserved fields output with their original values\n\n---\n\n## 🚨 STEP 1: Field Preservation (CRITICAL)\n\n**NOC tickets (ticketCategory = 2) come from automated monitoring systems.**\n\n**YOU MUST PRESERVE ALL EXISTING FIELD CLASSIFICATIONS:**\n\n### NEVER MODIFY THESE FIELDS:\n- `ticketType` - Preserve as-is (typically Alert = 5)\n- `issueType` - Preserve existing value exactly (even if null/empty)\n- `subIssueType` - Preserve existing value exactly (even if null/empty)\n- `priority` - Preserve existing value exactly\n- `ticketCategory` - Always remains 2 (NOC)\n\n### ONLY UPDATE THESE FIELDS:\n- `title` - Clean up for technician readability, include device name\n- `description` - Format monitoring data clearly, preserve ALL technical details\n- `queueID` - Route based on device type (see Queue Assignment Logic)\n\n**Why NOC Alerts Preserve Classification:**\n- These alerts are generated by automated monitoring systems\n- The system already classified them correctly (ticketType, issueType, subIssueType, priority)\n- Your job is to FORMAT the content, not RECLASSIFY the ticket\n- Changing classifications breaks SLA tracking and reporting\n\n---\n\n## 📋 STEP 2: Queue Assignment Logic\n\n**CRITICAL: Queue assignment is based on device type, NOT ticket category.**\n\n**Queue IDs:**\n- **Level 1 Support (29682833)**: Workstations, desktops, laptops, end-user devices\n- **Level 2 Support (29682969)**: Servers, infrastructure, critical systems\n\n**Assignment Rules (MUST be applied in this exact order):**\n\n**RULE 1: Critical Priority Override**\n- If priority = 4 (Critical) → **Always Level 2 (29682969)**\n- This overrides ALL other rules\n\n**RULE 2: Policy Name Detection (HIGHEST RELIABILITY - Check First)**\n- Policy contains \"**Windows Workstation**\" OR \"**workstations**\" → **Level 1 (29682833)**\n- Policy contains \"**Server**\" or \"**Hypervisor**\" → **Level 2 (29682969)**\n- **This is the most reliable indicator - trust the policy name**\n\n**RULE 3: Device Naming Patterns**\n- **Workstation patterns** → **Level 1 (29682833)**:\n - `DT-XXX` or `DTXXX` (desktops) - e.g., MIDUNIDT017, DT073\n - `LT-XXX` or `LTXXX` (laptops)\n - `SP-XXX` or `SPXXX` (tablets/surface)\n - Any device name ending in \"DT\" followed by numbers\n- **Server patterns** → **Level 2 (29682969)**:\n - Server naming convention: `[Location][App][Function][Number]` (e.g., CBPDELASP01, WULFDC01, pitwpmasp01)\n - Contains: SERVER, SRV, SQL, DC, EXCH in device name\n\n**RULE 4: Content Keywords**\n- **Workstation indicators** → **Level 1 (29682833)**:\n - \"workstation\", \"desktop\", \"laptop\", \"end-user device\", \"client machine\", \"user pc\"\n- **Server indicators** → **Level 2 (29682969)**:\n - \"server\", \"domain controller\", \"file server\", \"SQL server\", \"hypervisor\", \"ESXi\", \"Hyper-V\"\n\n**RULE 5: Zoom Monitoring Alerts**\n- Zoom Room hardware/connectivity alerts → **Level 2 (29682969)**\n- Conference room equipment is infrastructure, not end-user devices\n- **Zoom Alert Parent-Child:** issueType: 82, subIssueType: 779-782\n\n**RULE 6: Default (Only if completely uncertain)**\n- If no clear indicators found → **Level 2 (29682969)** for safety\n- **Do NOT use this rule if Rules 2-4 provide clear indicators**\n\n---\n\n**CRITICAL INSTRUCTIONS:**\n- **NEVER override workstation policy name detection** - if policy says \"workstations\", it goes to Level 1\n- **Policy name is the most reliable indicator** - trust it over your interpretation\n- **Only use Level 2 default when truly uncertain** - not when clear workstation indicators exist\n- **Device names with DT/LT/SP patterns are always workstations** - route to Level 1\n\n---\n\n### Queue Assignment Examples:\n\n**Example 1: Workstation Disk Alert** ✅ **CORRECT**\n```\nInput:\n Policy: \"Operating System: Windows Workstation\"\n Device: DT073\n Priority: 6 (High)\n\nAnalysis:\n ✅ RULE 2 MATCH: Policy contains \"Windows Workstation\"\n ✅ RULE 3 MATCH: Device name DT073 (workstation pattern)\n ✅ Priority is NOT Critical (6 ≠ 4)\n\nDecision: Level 1 (29682833)\nOutput in FieldIDs: \"queueID\": 29682833\n```\n\n**Example 2: Huntress Service Monitor on Workstation** ✅ **CORRECT**\n```\nInput:\n Policy: \"Wulf - Huntress Service Monitor workstations\"\n Device: MIDUNIDT017\n Priority: 2 (Medium)\n\nAnalysis:\n ✅ RULE 2 MATCH: Policy contains \"workstations\"\n ✅ RULE 3 MATCH: Device name contains \"DT\" (MIDUNIDT017 = workstation)\n ✅ Priority is NOT Critical (2 ≠ 4)\n\nDecision: Level 1 (29682833)\nOutput in FieldIDs: \"queueID\": 29682833\n```\n\n**Example 3: Server Offline Alert** ✅ **CORRECT**\n```\nInput:\n Policy: \"Operating System: Windows Server\"\n Device: pitwpmasp01\n Priority: 4 (Critical)\n\nAnalysis:\n ✅ RULE 1 MATCH: Priority = 4 (Critical)\n ✅ RULE 2 MATCH: Policy contains \"Server\"\n ✅ RULE 3 MATCH: Device name = server pattern\n\nDecision: Level 2 (29682969)\nOutput in FieldIDs: \"queueID\": 29682969\n```\n\n**Example 4: Zoom Room Alert** ✅ **CORRECT**\n```\nInput:\n Title: \"[Alert] Seubert Field Conference Room: Video Device Disconnected\"\n Description: \"Zoom Rooms status alert...\"\n issueType: 82 (Zoom Monitoring)\n Priority: 2 (Medium)\n\nAnalysis:\n ✅ RULE 5 MATCH: Zoom Room infrastructure monitoring\n ✅ Conference room equipment (not end-user device)\n\nDecision: Level 2 (29682969)\nOutput in FieldIDs: \"queueID\": 29682969\n```\n\n**Example 5: When NOT to Use Default** ❌ **INCORRECT**\n```\nInput:\n Policy: \"Wulf - Huntress Service Monitor workstations\"\n Device: MIDUNIDT017\n\nWRONG REASONING:\n ❌ \"I see infrastructure monitoring keyword, route to Level 2\"\n ❌ \"Following instruction to route to Level 2 Infrastructure\"\n ❌ \"Default to Level 2 for safety\"\n\nCORRECT REASONING:\n ✅ Policy explicitly says \"workstations\" - RULE 2 applies\n ✅ Device name has \"DT\" pattern - RULE 3 applies\n ✅ Both rules point to Level 1 (29682833)\n\nDecision: Level 1 (29682833) - NOT Level 2\n```\n\n---\n\n## 📝 STEP 3: Title Formatting\n\nCreate clear, scannable titles that identify the infrastructure alert and include the device name:\n\n**Format:** `[Alert Type] - [DeviceName (Serial/Model)] - [Brief Context]`\n\n**Examples:**\n- Disk Space Alert - DT073 (30G10014US) - C: Drive 90% Used\n- Service Monitor Alert - MIDUNIDT017 - HuntressAgent Service Stopped\n- Device Offline Alert - pitwpmasp01 - Offline for 3 Minutes\n- High CPU Usage - SERVER01 - 95% Utilization\n- Disk Space Alert - NAS-PROD - 10% Free Space\n- Network Interface Down - SWITCH-CORE - Port 24\n- Memory Alert - HYPERVISOR01 - 90% Utilization\n- Backup Failed - VEEAM-SERVER - Job Timeout\n- Zoom Room Alert - Seubert Field Conference Room - Video Device Disconnected\n\n**Device Name Extraction:**\n- Look for device identifiers like `DT073`, `LT032`, `SERVER01`, `MIDUNIDT017` in the alert description\n- For Zoom alerts: Extract conference room name from title (before colon or in brackets)\n- Include both the friendly name (DT073) and serial/model number if available\n- Device names often appear after phrases like \"for [DeviceName]\" or in the device context\n\n**Preserve:**\n- Exact device names (e.g., CBPDELASP01, LT032, SERVER-NYC-01, MIDUNIDT017, pitwpmasp01)\n- Conference room names for Zoom alerts\n- Monitoring policy names\n- Alert thresholds and current values\n- All technical metrics\n\n---\n\n## 📋 STEP 4: Description Formatting\n\nOrganize infrastructure alert information clearly while preserving ALL technical details:\n```\nAlert Summary\n[Brief 1-2 sentence summary of the infrastructure alert]\n\nDevice/System Information\n- Device Name: [exact name, e.g., DT073, MIDUNIDT017, pitwpmasp01]\n- Device Serial/Model: [if available, e.g., 30G10014US (LENOVO), 11MY001SUS (LENOVO)]\n- Device Type: [server, switch, firewall, NAS, workstation, laptop, Zoom Room, VMware virtual machine, etc.]\n- Location: [conference room name for Zoom alerts, physical location for others]\n- Monitoring Policy: [exact policy name, e.g., \"Wulf - Huntress Service Monitor workstations\", \"Operating System: Windows Server\"]\n- Last Online: [timestamp with timezone]\n- Last Known User: [if applicable for workstations, e.g., \"SPI\\\\cgrace\", \"WESTPENNMULTI\\\\wadmin\"]\n\nAlert Details\n- Alert Type: [disk, CPU, memory, service, network, backup, Zoom hardware, device offline, etc.]\n- Trigger: [exact trigger condition from alert]\n- Threshold: [configured threshold if applicable]\n- Current Value: [actual reading if applicable]\n- Alert Time: [exact timestamp when ticket was created]\n- Duration: [how long condition has existed]\n\nTechnical Data\n- Alert generated from AEM alert [alert ID]\n- [All monitoring metrics, logs, performance data - preserve exactly]\n- [Service names, process details, status information]\n\nRaw Alert Content\n[Complete original alert message - paste everything exactly as received]\n```\n\n**CRITICAL - PRESERVE EVERYTHING:**\n- Exact device names, hostnames, IP addresses\n- Device serial numbers, model numbers (e.g., 30G10014US, LENOVO, 11MY001SUS, VMware7,1)\n- Conference room names for Zoom alerts\n- Monitoring policy names (preserve exact capitalization and spacing)\n- Alert thresholds, metric values, status conditions\n- Performance counters, utilization percentages\n- Complete timestamps with time zones (e.g., \"2025-10-24 12:02:44 UTC\")\n- All technical identifiers and diagnostic data (AEM alert IDs, GUIDs)\n- Service names, process IDs, network interfaces\n- Storage paths, volume names, backup job names, repository paths\n- Last known user information for workstations (domain\\\\username format)\n- Device online/offline status with exact timestamps\n- Zoom Room status details, hardware component information\n- Virtual machine details (VMware, Hyper-V host information)\n- Last known domain and user context\n\n**NEVER:**\n- Summarize or paraphrase alert content\n- Remove device identifiers or technical details\n- Simplify performance metrics or threshold values\n- Omit any part of the original monitoring alert\n- Change technical terminology\n- Remove serial numbers or model information\n- Abbreviate conference room names\n- Remove domain information from user accounts\n- Simplify or remove AEM alert IDs or GUIDs\n\n---\n\n## 🎯 Zoom Monitoring Alert Handling\n\n**Detection Patterns:**\n- \"[Alert]\" in title with conference room name\n- \"Zoom Rooms status\" OR \"Zoom Room\" in description\n- Conference room/office names in title\n\n**Zoom Alert Parent-Child Structure:**\n- **issueType**: ALWAYS 82 (Zoom Monitoring) - PARENT category\n- **subIssueType**: Based on specific alert type - CHILD category\n\n**Zoom subIssueType Mappings (Parent: 82):**\n- **779**: Controller (iPad) / Scheduling Display\n- **780**: Video Device Disconnected\n- **781**: Low Bandwidth\n- **782**: Audio Device Disconnected\n\n**Common Zoom Room Names:**\n\n**Seubert and Associates:**\n- Bay Front, Palm Beach, Philadelphia Office, PNC Conference Room\n- River View, Seubert Field Conference Room (also known as Heinz Conference Room), Seubert U\n\n**Hynes Industries:**\n- Bresnahan Conference Room, Finnegan Sales Conference Room\n- Hynes Executive Boardroom, Kokomo Conference Zoom Room\n- Ricks Office Zoom Room\n\n**Zoom Alert Characteristics:**\n- These are infrastructure/facility alerts for conference room equipment\n- NOT end-user workstation issues\n- Always route to Level 2 (29682969) - infrastructure support\n- issueType and subIssueType are already set by automation - preserve them exactly\n\n---\n\n## 📤 Final Output Format (COPY EXACTLY)\n```\nTicket ID: 636352\n\n### NOC Alert Processing\n\n**Field Preservation Confirmation:**\n✅ ticketType: Preserved as 5\n✅ issueType: Preserved as 78\n✅ subIssueType: Preserved as 866\n✅ priority: Preserved as 2\n✅ ticketCategory: 2 (Network Operations Center)\n\n**Recommended Updates:**\n\n**Corrected Title**: HuntressAgent Service Monitor Alert - MIDUNIDT017 - Service Running False\n\n**Rewritten Description**:\n```\nAlert Summary\nThe HuntressAgent service is reported as not running (status equals false) on the monitored device.\n\nDevice/System Information\n- Device Name: MIDUNIDT017\n- Alternate Device: 11MY001SUS (LENOVO)\n- Device Type: Workstation\n- Monitoring Policy: Wulf - Huntress Service Monitor workstations\n- Last Online: 2025-10-24 12:02:44 UTC\n- Last Known User: SPI\\cgrace\n\n[... rest of formatted content ...]\n```\n\n**Queue Assignment**: 29682833\n- Device Type Detected: Workstation\n- Queue Logic Applied: RULE 2 - Policy contains \"workstations\"\n\n### FieldIDs Output\n```json\n{\n \"ticketType\": 5,\n \"priority\": 2,\n \"ticketCategory\": 2,\n \"issueType\": 78,\n \"subIssueType\": 866,\n \"queueID\": 29682833\n}\n```\nThe above is an EXAMPLE showing correct format. Your actual content will differ but the format structure must be IDENTICAL.\n\n⚠️ Common Mistakes to Avoid\nDON'T do these:\n\n❌ Wrap entire output in code fence: ``` Ticket ID... ```\n❌ Put title on next line: **Corrected Title**:\\nTitle text here\n❌ Forget code fence for description: Just plain text after \"Rewritten Description\"\n❌ Use wrong JSON fence: ```{ instead of ```json\n❌ Output string IDs: \"ticketType\": \"5\" instead of \"ticketType\": 5\n❌ Forget ticket ID at top\n❌ Use double colons: **Corrected Title**::\n❌ Route workstations to Level 2 when policy clearly says \"workstations\"\n❌ Override workstation detection with \"default to Level 2\" reasoning\n\nDO these:\n\n✅ Start directly with \"Ticket ID:\" (no outer code fence)\n✅ Title on SAME line after colon: **Corrected Title**: Title text\n✅ Description inside ```...``` code fence (but not the whole output)\n✅ JSON with json language identifier\n✅ All IDs as numbers not strings\n✅ Ticket ID as first line\n✅ Single colon after labels with one space before title\n✅ Trust policy names - \"workstations\" → Level 1, \"server\" → Level 2\n✅ Preserve ALL field values exactly as received\n\n\nYou will now receive a ticket to process. Follow all steps above and output in the exact format specified." } }, "type": "@n8n/n8n-nodes-langchain.agent", "typeVersion": 2.2, "position": [ 1440, 960 ], "id": "5d439bb4-9b26-4d4e-9b12-c6d93c9455d5", "name": "AI Agent2" }, { "parameters": { "model": { "__rl": true, "value": "gpt-5.2", "mode": "list", "cachedResultName": "gpt-5.2" }, "options": { "timeout": 180000 } }, "type": "@n8n/n8n-nodes-langchain.lmChatOpenAi", "typeVersion": 1.2, "position": [ 1520, 1184 ], "id": "a58ed2dc-f81f-4965-8259-4e8f447fa176", "name": "OpenAI Chat Model2", "credentials": { "openAiApi": { "id": "38HvRPpoNqRs3WND", "name": "OpenAi Dan" } } }, { "parameters": { "resource": "ticket", "operation": "update", "id": "={{ $json.id }}", "fieldsToMap": { "mappingMode": "defineBelow", "value": { "description": "={{ $json[\"description\"] }}", "queueID": "={{ $json[\"queueID\"] }}", "status": "47", "title": "={{ $json[\"title\"] }}", "ticketCategory": "2", "ticketType": "5" }, "matchingColumns": [], "schema": [ { "id": "assignedResourceID", "displayName": "Assigned resource ID (Reference: Resource | assignedResourceID)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Addigy API", "value": "30861552", "description": "" }, { "name": "Anthony Bonante", "value": "30861472", "description": "" }, { "name": "Autotask Administrator", "value": "4", "description": "" }, { "name": "Brad Fortney", "value": "30861483", "description": "" }, { "name": "Casey Roush", "value": "30861478", "description": "" }, { "name": "chat test", "value": "30861548", "description": "" }, { "name": "Collin Imler", "value": "30861443", "description": "" }, { "name": "Connect Booster", "value": "30861526", "description": "" }, { "name": "Cory Houck", "value": "30861463", "description": "" }, { "name": "Crewhu Bot", "value": "30861496", "description": "" }, { "name": "Dan Bucci", "value": "29823085", "description": "" }, { "name": "Darrius Jones", "value": "30861543", "description": "" }, { "name": "Dash Board", "value": "30861460", "description": "" }, { "name": "Datto RMM", "value": "30861455", "description": "" }, { "name": "David Bauer", "value": "30861549", "description": "" }, { "name": "Delmar Insights", "value": "30861534", "description": "" }, { "name": "DeskDirector Integrator", "value": "30861501", "description": "" }, { "name": "Development N8N", "value": "30861571", "description": "" }, { "name": "Evan Life", "value": "30861544", "description": "" }, { "name": "Garrett Reihner", "value": "30861570", "description": "" }, { "name": "Gary Hightower", "value": "30861458", "description": "" }, { "name": "Heather Collins", "value": "30861568", "description": "" }, { "name": "Huntress Labs", "value": "30861538", "description": "" }, { "name": "Jake Hammel", "value": "30861450", "description": "" }, { "name": "James Hubbard", "value": "30861536", "description": "" }, { "name": "James Meier", "value": "30861471", "description": "" }, { "name": "Jeremy Johnston", "value": "29682788", "description": "" }, { "name": "John Stvartak", "value": "30861444", "description": "" }, { "name": "Jordan Goff", "value": "30861491", "description": "" }, { "name": "Joshua Mitchell", "value": "30861540", "description": "" }, { "name": "Kayla Lantz", "value": "30861507", "description": "" }, { "name": "Lauren Baczuk", "value": "30861505", "description": "" }, { "name": "Lifecycle Insights", "value": "30861551", "description": "" }, { "name": "Lorentz Hinrichsen", "value": "29683311", "description": "" }, { "name": "Miguel Vasquez", "value": "30861541", "description": "" }, { "name": "MissionControl API", "value": "30861530", "description": "" }, { "name": "n8n api", "value": "30861569", "description": "" }, { "name": "passportal sync", "value": "30861557", "description": "" }, { "name": "Pax8 API", "value": "30861528", "description": "" }, { "name": "Quickbooks Online", "value": "30861532", "description": "" }, { "name": "QuoteWerks Sales", "value": "30861531", "description": "" }, { "name": "Rewst Automation", "value": "30861573", "description": "" }, { "name": "RMM Tool", "value": "29764294", "description": "" }, { "name": "Ryan Day", "value": "30861510", "description": "" }, { "name": "Salesbuildr API", "value": "30861574", "description": "" }, { "name": "Sean Glenn", "value": "30861545", "description": "" }, { "name": "SecureBreachNow API", "value": "30861554", "description": "" }, { "name": "Steve Cianflone", "value": "30861476", "description": "" }, { "name": "TimeZest API", "value": "30861529", "description": "" }, { "name": "Tom Carlin", "value": "30861456", "description": "" }, { "name": "Tony Feerst", "value": "29775118", "description": "" }, { "name": "Warranty Master", "value": "30861475", "description": "" }, { "name": "Wulf Automation", "value": "30861533", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "assignedResourceRoleID", "displayName": "Assigned resource role ID (Integer | assignedResourceRoleID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "billingCodeID", "displayName": "Billing code ID (Reference: BillingCode | billingCodeID)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Administration Dept Meeting (29792118)", "value": "29792118", "description": "" }, { "name": "Bench Work (29682870)", "value": "29682870", "description": "" }, { "name": "Block Hours (29720332)", "value": "29720332", "description": "" }, { "name": "Business Development (29792079)", "value": "29792079", "description": "" }, { "name": "Change Orders (5)", "value": "5", "description": "" }, { "name": "Client Onboarding (29792114)", "value": "29792114", "description": "" }, { "name": "Client Relations and Sales (29792101)", "value": "29792101", "description": "" }, { "name": "Client Success (29682860)", "value": "29682860", "description": "" }, { "name": "Client Success Dept Meeting (29792121)", "value": "29792121", "description": "" }, { "name": "Client Success Mgmt (Admin) (29792122)", "value": "29792122", "description": "" }, { "name": "Client Supplies (29792125)", "value": "29792125", "description": "" }, { "name": "Co-Managed IT Resource (29792072)", "value": "29792072", "description": "" }, { "name": "Company Morning Huddle (29792098)", "value": "29792098", "description": "" }, { "name": "Cyber Security (29792084)", "value": "29792084", "description": "" }, { "name": "Data Center Cloud (29792087)", "value": "29792087", "description": "" }, { "name": "Datto Cloud (29792096)", "value": "29792096", "description": "" }, { "name": "Discount (-1)", "value": "-1", "description": "" }, { "name": "Discount Non-Taxable (-2)", "value": "-2", "description": "" }, { "name": "Domain Name (29694963)", "value": "29694963", "description": "" }, { "name": "Entertainment Expense (3)", "value": "3", "description": "" }, { "name": "Escalation (29792117)", "value": "29792117", "description": "" }, { "name": "Financial and Accounting (Admin) (29792103)", "value": "29792103", "description": "" }, { "name": "HaaS (29792106)", "value": "29792106", "description": "" }, { "name": "Hardware - Infrastructure (29792094)", "value": "29792094", "description": "" }, { "name": "Hardware (29682871)", "value": "29682871", "description": "" }, { "name": "Hardware (29792065)", "value": "29792065", "description": "" }, { "name": "Holiday (91208)", "value": "91208", "description": "" }, { "name": "Hourly Payroll (29792113)", "value": "29792113", "description": "" }, { "name": "Human Resources (Admin) (29682781)", "value": "29682781", "description": "" }, { "name": "Innovation and Technology (29792112)", "value": "29792112", "description": "" }, { "name": "Inventory Management (29792105)", "value": "29792105", "description": "" }, { "name": "Labor (29682918)", "value": "29682918", "description": "" }, { "name": "Labor (29702246)", "value": "29702246", "description": "" }, { "name": "Labor (29792064)", "value": "29792064", "description": "" }, { "name": "Legal and Compliance (Admin) (29792110)", "value": "29792110", "description": "" }, { "name": "Managed IT & Backup (29792083)", "value": "29792083", "description": "" }, { "name": "Marketing (Admin) (29792100)", "value": "29792100", "description": "" }, { "name": "Marketing & Branding (29792109)", "value": "29792109", "description": "" }, { "name": "Mileage (2)", "value": "2", "description": "" }, { "name": "Milestone (29682913)", "value": "29682913", "description": "" }, { "name": "Miscellaneous (29682783)", "value": "29682783", "description": "" }, { "name": "Monitoring Services (29683277)", "value": "29683277", "description": "" }, { "name": "New Business Development (Admin) (29792099)", "value": "29792099", "description": "" }, { "name": "Nextiva Services (29792068)", "value": "29792068", "description": "" }, { "name": "NOC Support (29792060)", "value": "29792060", "description": "" }, { "name": "Non-Taxable Products (29682839)", "value": "29682839", "description": "" }, { "name": "O365 Cloud (29792085)", "value": "29792085", "description": "" }, { "name": "O365 Support (29792082)", "value": "29792082", "description": "" }, { "name": "Office Administration (29682808)", "value": "29682808", "description": "" }, { "name": "Office Administration (29792102)", "value": "29792102", "description": "" }, { "name": "On-site Support (29780565)", "value": "29780565", "description": "" }, { "name": "Operations Management (29792077)", "value": "29792077", "description": "" }, { "name": "Out of Scope (29792071)", "value": "29792071", "description": "" }, { "name": "Parking (29765131)", "value": "29765131", "description": "" }, { "name": "Peer Group(s) (29792115)", "value": "29792115", "description": "" }, { "name": "Personal Development and Leadership (29792111)", "value": "29792111", "description": "" }, { "name": "Personal Time (91209)", "value": "91209", "description": "" }, { "name": "Post Sale (29792075)", "value": "29792075", "description": "" }, { "name": "Pro Services Dept Meeting (29792123)", "value": "29792123", "description": "" }, { "name": "Pro Services Mgmt (Admin) (29792124)", "value": "29792124", "description": "" }, { "name": "Procurement & Fulfillment (Admin) (29792104)", "value": "29792104", "description": "" }, { "name": "Professional Service - PC Setup (29792130)", "value": "29792130", "description": "" }, { "name": "Project Labor (29792088)", "value": "29792088", "description": "" }, { "name": "Projects (29682915)", "value": "29682915", "description": "" }, { "name": "Quote Manager Temp (29792107)", "value": "29792107", "description": "" }, { "name": "Recurring Services (29682912)", "value": "29682912", "description": "" }, { "name": "Reimbursed Expense (29792093)", "value": "29792093", "description": "" }, { "name": "Remote Support (29780571)", "value": "29780571", "description": "" }, { "name": "Retainer Purchase (29720333)", "value": "29720333", "description": "" }, { "name": "RMA (29792074)", "value": "29792074", "description": "" }, { "name": "Sales (29792131)", "value": "29792131", "description": "" }, { "name": "Service Delivery Dept Meeting (29792119)", "value": "29792119", "description": "" }, { "name": "Service Delivery Mgmt (Admin) (29792120)", "value": "29792120", "description": "" }, { "name": "Shipping & Handling (29739200)", "value": "29739200", "description": "" }, { "name": "Sick Time (91207)", "value": "91207", "description": "" }, { "name": "SOC (Admin) (29792127)", "value": "29792127", "description": "" }, { "name": "SOC Support (29792081)", "value": "29792081", "description": "" }, { "name": "Software (29682872)", "value": "29682872", "description": "" }, { "name": "Software (29792066)", "value": "29792066", "description": "" }, { "name": "Software Licenses (29684861)", "value": "29684861", "description": "" }, { "name": "Strategic Planning and Vision (29792108)", "value": "29792108", "description": "" }, { "name": "SubContractor (29792092)", "value": "29792092", "description": "" }, { "name": "Subscription (29682919)", "value": "29682919", "description": "" }, { "name": "System Build & Config (29792129)", "value": "29792129", "description": "" }, { "name": "T&M Labor (29792089)", "value": "29792089", "description": "" }, { "name": "Tasks (29682916)", "value": "29682916", "description": "" }, { "name": "Taxable Products (29682840)", "value": "29682840", "description": "" }, { "name": "Taxes from Autotask (29682914)", "value": "29682914", "description": "" }, { "name": "Ticket Purchase (29720334)", "value": "29720334", "description": "" }, { "name": "Ticket Triage (29792116)", "value": "29792116", "description": "" }, { "name": "Tickets (29682917)", "value": "29682917", "description": "" }, { "name": "Training (29792126)", "value": "29792126", "description": "" }, { "name": "Travel Charge (29682782)", "value": "29682782", "description": "" }, { "name": "Travel Time (27192)", "value": "27192", "description": "" }, { "name": "Travel Time (29792067)", "value": "29792067", "description": "" }, { "name": "Vacation (91206)", "value": "91206", "description": "" }, { "name": "VAR Cloud Tax Exempt (29792128)", "value": "29792128", "description": "" }, { "name": "VAR Cloud Taxable (29792086)", "value": "29792086", "description": "" }, { "name": "Web Hosting (29792073)", "value": "29792073", "description": "" }, { "name": "Workstation (29695008)", "value": "29695008", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "changeApprovalBoard", "displayName": "Change approval board (Picklist | changeApprovalBoard)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Software Request CAB", "value": "3", "description": "" }, { "name": "Wulf CAB", "value": "1", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "changeApprovalStatus", "displayName": "Change approval status (Picklist | changeApprovalStatus)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Approved", "value": "5", "description": "" }, { "name": "Assigned", "value": "2", "description": "" }, { "name": "Not Assigned", "value": "1", "description": "" }, { "name": "Partially Approved", "value": "4", "description": "" }, { "name": "Rejected", "value": "6", "description": "" }, { "name": "Requested", "value": "3", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "changeApprovalType", "displayName": "Change approval type (Picklist | changeApprovalType)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "All approvers must approve", "value": "1", "description": "" }, { "name": "One approver must approve", "value": "2", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "changeInfoField1", "displayName": "Change info field1 (String | changeInfoField1)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "changeInfoField2", "displayName": "Change info field2 (String | changeInfoField2)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "changeInfoField3", "displayName": "Change info field3 (String | changeInfoField3)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "changeInfoField4", "displayName": "Change info field4 (String | changeInfoField4)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "changeInfoField5", "displayName": "Change info field5 (String | changeInfoField5)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "companyID", "displayName": "Company ID (Integer | companyID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "companyLocationID", "displayName": "Company location ID (Integer | companyLocationID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "configurationItemID", "displayName": "Configuration item ID (Integer | configurationItemID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "contactID", "displayName": "Contact ID (Integer | contactID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "contractID", "displayName": "Contract ID (Integer | contractID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "contractServiceBundleID", "displayName": "Contract service bundle ID (Long | contractServiceBundleID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "contractServiceID", "displayName": "Contract service ID (Long | contractServiceID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "createdByContactID", "displayName": "Created by contact ID (Integer | createdByContactID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "description", "displayName": "Description (String | description)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": false }, { "id": "dueDateTime", "displayName": "Due date time (Datetime | dueDateTime)", "type": "dateTime", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "estimatedHours", "displayName": "Estimated hours (Decimal | estimatedHours)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "externalID", "displayName": "External ID (String | externalID)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "issueType", "displayName": "Issue type (Picklist | issueType)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "24-Hour Emergency Support", "value": "36", "description": "" }, { "name": "Active Directory & Accounts", "value": "76", "description": "" }, { "name": "Backups", "value": "38", "description": "" }, { "name": "Blumira Monitoring", "value": "83", "description": "" }, { "name": "Centralized Services", "value": "22", "description": "" }, { "name": "Client Success", "value": "28", "description": "" }, { "name": "Collaboration (Video, Voice & Chat)", "value": "42", "description": "" }, { "name": "Datto RMM Monitoring", "value": "57", "description": "" }, { "name": "Decommission", "value": "75", "description": "" }, { "name": "Deployment", "value": "45", "description": "" }, { "name": "DUO Monitoring", "value": "77", "description": "" }, { "name": "Email", "value": "34", "description": "" }, { "name": "Epicor", "value": "66", "description": "" }, { "name": "Hardware", "value": "31", "description": "" }, { "name": "Home Support", "value": "65", "description": "" }, { "name": "Human Resources", "value": "55", "description": "" }, { "name": "Huntress Monitoring", "value": "78", "description": "" }, { "name": "M365 Monitoring", "value": "79", "description": "" }, { "name": "MAC", "value": "21", "description": "" }, { "name": "MES", "value": "68", "description": "" }, { "name": "MES AccPac", "value": "72", "description": "" }, { "name": "MES Data Collection", "value": "71", "description": "" }, { "name": "MES IT Department", "value": "74", "description": "" }, { "name": "MES PowerBI", "value": "73", "description": "" }, { "name": "MES Preactor", "value": "70", "description": "" }, { "name": "MES Server", "value": "69", "description": "" }, { "name": "Networking", "value": "25", "description": "" }, { "name": "Office Administration", "value": "43", "description": "" }, { "name": "Old Sales", "value": "26", "description": "" }, { "name": "Peripheral Connectivity", "value": "51", "description": "" }, { "name": "Post Sales", "value": "87", "description": "" }, { "name": "Ransomware Monitoring", "value": "85", "description": "" }, { "name": "Reactive", "value": "20", "description": "" }, { "name": "Remote Access", "value": "63", "description": "" }, { "name": "Sales", "value": "86", "description": "" }, { "name": "Security", "value": "59", "description": "" }, { "name": "SentinelOne Monitoring", "value": "80", "description": "" }, { "name": "Server", "value": "30", "description": "" }, { "name": "Software", "value": "46", "description": "" }, { "name": "Sophos Monitoring", "value": "81", "description": "" }, { "name": "Technology Alignment", "value": "84", "description": "" }, { "name": "Thrasher Internal", "value": "67", "description": "" }, { "name": "Vendor Support", "value": "61", "description": "" }, { "name": "Zoom Monitoring", "value": "82", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "isVisibleToComanaged", "displayName": "Is visible to comanaged (Boolean | isVisibleToComanaged)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Yes", "value": "true", "description": "True/Yes" }, { "name": "No", "value": "false", "description": "False/No" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "monitorID", "displayName": "Monitor ID (Long | monitorID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "monitorTypeID", "displayName": "Monitor type ID (Picklist | monitorTypeID)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "AntivirusMonitor", "value": "23", "description": "" }, { "name": "BackupMonitor", "value": "13", "description": "" }, { "name": "ComponentMonitor", "value": "4", "description": "" }, { "name": "CPUMonitor", "value": "2", "description": "" }, { "name": "DiskUsageMonitor", "value": "10", "description": "" }, { "name": "EventLogMonitor", "value": "7", "description": "" }, { "name": "FileFolderSizeMonitor", "value": "11", "description": "" }, { "name": "HardwareMonitor", "value": "19", "description": "" }, { "name": "MemoryMonitor", "value": "3", "description": "" }, { "name": "NetworkMonitor", "value": "16", "description": "" }, { "name": "NetworkOfflineMonitor", "value": "17", "description": "" }, { "name": "OnlineStatusMonitor", "value": "1", "description": "" }, { "name": "PatchMonitor", "value": "20", "description": "" }, { "name": "PrinterStatusMonitor", "value": "14", "description": "" }, { "name": "ProcessMonitor", "value": "5", "description": "" }, { "name": "RansomwareMonitor", "value": "24", "description": "" }, { "name": "SecurityCenterMonitor", "value": "9", "description": "" }, { "name": "SecurityManagementMonitor", "value": "12", "description": "" }, { "name": "ServiceMonitor", "value": "6", "description": "" }, { "name": "SnmpMonitor", "value": "15", "description": "" }, { "name": "SoftwareMonitor", "value": "8", "description": "" }, { "name": "TemperatureSensorMonitor", "value": "18", "description": "" }, { "name": "ThreatDetection", "value": "25", "description": "" }, { "name": "WindowsPerformanceMonitor", "value": "21", "description": "" }, { "name": "WmiMonitor", "value": "22", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "opportunityID", "displayName": "Opportunity ID (Integer | opportunityID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "organizationalLevelAssociationID", "displayName": "Organizational level association ID (Integer | organizationalLevelAssociationID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "priority", "displayName": "Priority (Picklist | priority)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Critical", "value": "4", "description": "" }, { "name": "Fast Track", "value": "11", "description": "" }, { "name": "High", "value": "6", "description": "" }, { "name": "Installation", "value": "10", "description": "" }, { "name": "Major Service", "value": "9", "description": "" }, { "name": "Medium", "value": "2", "description": "" }, { "name": "Minor Service", "value": "8", "description": "" }, { "name": "Security Event", "value": "7", "description": "" }, { "name": "Standard", "value": "3", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "problemTicketId", "displayName": "Problem ticket id (Integer | problemTicketId)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "projectID", "displayName": "Project ID (Integer | projectID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "purchaseOrderNumber", "displayName": "Purchase order number (String | purchaseOrderNumber)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "queueID", "displayName": "Queue ID (Picklist | queueID)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Client Success", "value": "29749490", "description": "" }, { "name": "Client Triage", "value": "5", "description": "" }, { "name": "Deployment", "value": "29853700", "description": "" }, { "name": "Follow Up", "value": "29853695", "description": "" }, { "name": "Glunt Help Desk", "value": "29853714", "description": "" }, { "name": "IT Operations", "value": "29853701", "description": "" }, { "name": "LEC Network Operations Center", "value": "29853754", "description": "" }, { "name": "LEC Security Operations Center", "value": "29853755", "description": "" }, { "name": "LEC Service Desk", "value": "29853753", "description": "" }, { "name": "Level 1 Support", "value": "29682833", "description": "" }, { "name": "Level 2 Support", "value": "29682969", "description": "" }, { "name": "Level 3 Support", "value": "29703428", "description": "" }, { "name": "Mission Control", "value": "29853699", "description": "" }, { "name": "Monitoring Alert", "value": "8", "description": "" }, { "name": "Operations Triage", "value": "29832283", "description": "" }, { "name": "PER Network Operations Center", "value": "29853751", "description": "" }, { "name": "PER Security Operations Center", "value": "29853752", "description": "" }, { "name": "PER Service Desk", "value": "29853750", "description": "" }, { "name": "Post Sale", "value": "6", "description": "" }, { "name": "Premier Automation Help Desk", "value": "29853706", "description": "" }, { "name": "Project Delivery", "value": "29853698", "description": "" }, { "name": "Purchasing", "value": "29853727", "description": "" }, { "name": "Sales", "value": "29853766", "description": "" }, { "name": "Subcontractor", "value": "29853741", "description": "" }, { "name": "TaskFire", "value": "29780304", "description": "" }, { "name": "TNT Pizza Help Desk", "value": "29853719", "description": "" }, { "name": "Trivium Packaging - Help Desk", "value": "29853697", "description": "" }, { "name": "Trivium Packaging - MES", "value": "29853731", "description": "" }, { "name": "TTG Change Mgmt", "value": "29853740", "description": "" }, { "name": "TTG Finance", "value": "29853723", "description": "" }, { "name": "TTG Help Desk", "value": "29853710", "description": "" }, { "name": "TTG Machines", "value": "29853720", "description": "" }, { "name": "TTG NetOps", "value": "29853721", "description": "" }, { "name": "TTG New User Access", "value": "29853728", "description": "" }, { "name": "TTG Remote", "value": "29853726", "description": "" }, { "name": "TTG Safety", "value": "29853724", "description": "" }, { "name": "TTG Security", "value": "29853738", "description": "" }, { "name": "TTG Term User Access", "value": "29853729", "description": "" }, { "name": "VCF Network Operations", "value": "29853757", "description": "" }, { "name": "VCF Security Operations Center", "value": "29853758", "description": "" }, { "name": "VCF Service Desk", "value": "29853756", "description": "" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "resolution", "displayName": "Resolution (String | resolution)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "rmaStatus", "displayName": "Rma status (Picklist | rmaStatus)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Authorized", "value": "2", "description": "" }, { "name": "Denied", "value": "3", "description": "" }, { "name": "Finished", "value": "9", "description": "" }, { "name": "Finished (Not Returned)", "value": "10", "description": "" }, { "name": "In Progress", "value": "8", "description": "" }, { "name": "On Hold", "value": "5", "description": "" }, { "name": "Open", "value": "4", "description": "" }, { "name": "Requested", "value": "1", "description": "" }, { "name": "Waiting for Customer", "value": "7", "description": "" }, { "name": "Withdrawn", "value": "6", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "rmaType", "displayName": "Rma type (Picklist | rmaType)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Repair", "value": "2", "description": "" }, { "name": "Replace", "value": "3", "description": "" }, { "name": "Return", "value": "1", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "serviceLevelAgreementID", "displayName": "Service level agreement ID (Picklist | serviceLevelAgreementID)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Default", "value": "1", "description": "" }, { "name": "NOC/SOC SLA", "value": "11", "description": "" }, { "name": "Post Sale SLA", "value": "16", "description": "" }, { "name": "Sales SLA", "value": "12", "description": "" }, { "name": "Service Desk - Standard SLA", "value": "9", "description": "" }, { "name": "Thrasher HD SLA", "value": "14", "description": "" }, { "name": "Wulf Response 24x7x365", "value": "10", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "source", "displayName": "Source (Picklist | source)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Autotask Portal", "value": "5", "description": "" }, { "name": "AWS Cloud Watch (email)", "value": "37", "description": "" }, { "name": "Blumira SIEM", "value": "36", "description": "" }, { "name": "Client Portal", "value": "-1", "description": "" }, { "name": "Client Success Team", "value": "30", "description": "" }, { "name": "Datto RMM (API)", "value": "8", "description": "" }, { "name": "Desk Director Portal", "value": "21", "description": "" }, { "name": "DUO (API)", "value": "32", "description": "" }, { "name": "Email", "value": "4", "description": "" }, { "name": "Huntress (email)", "value": "31", "description": "" }, { "name": "In Person/Onsite", "value": "6", "description": "" }, { "name": "Insourced", "value": "-2", "description": "" }, { "name": "Lifecyle", "value": "40", "description": "" }, { "name": "M365 (email)", "value": "33", "description": "" }, { "name": "Other", "value": "1", "description": "" }, { "name": "Phone", "value": "2", "description": "" }, { "name": "Recurring", "value": "22", "description": "" }, { "name": "RMM Tool", "value": "17", "description": "" }, { "name": "RocketCyber Alert", "value": "24", "description": "" }, { "name": "SentinelOne (email)", "value": "34", "description": "" }, { "name": "Service Delivery Team", "value": "38", "description": "" }, { "name": "Service Escalation", "value": "39", "description": "" }, { "name": "Sophos (email)", "value": "35", "description": "" }, { "name": "Text Message", "value": "18", "description": "" }, { "name": "Zoom (email)", "value": "27", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "status", "displayName": "Status (Picklist | status)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Burn-in In Progress", "value": "46", "description": "" }, { "name": "Client Non-Responsive", "value": "37", "description": "" }, { "name": "Complete", "value": "5", "description": "" }, { "name": "Dispatched", "value": "10", "description": "" }, { "name": "End User Note Added", "value": "19", "description": "" }, { "name": "Escalate", "value": "11", "description": "" }, { "name": "Escalate to CSM", "value": "61", "description": "" }, { "name": "Escalate to Customer HD", "value": "62", "description": "" }, { "name": "Escalate to MC", "value": "48", "description": "" }, { "name": "Escalate to Wulf", "value": "57", "description": "" }, { "name": "Huddle Review", "value": "55", "description": "" }, { "name": "In Progress", "value": "8", "description": "" }, { "name": "Internal Note Added", "value": "66", "description": "" }, { "name": "Loading Customer Config", "value": "60", "description": "" }, { "name": "Need to Order/Fulfill", "value": "59", "description": "" }, { "name": "New", "value": "1", "description": "Default value" }, { "name": "On Hold", "value": "25", "description": "" }, { "name": "Outsourced", "value": "69", "description": "" }, { "name": "Pending Next Site Visit", "value": "45", "description": "" }, { "name": "Pre-Pick Order", "value": "58", "description": "" }, { "name": "Quote Delivered", "value": "67", "description": "" }, { "name": "Ready for Customer Config", "value": "68", "description": "" }, { "name": "Ready to Deploy", "value": "15", "description": "" }, { "name": "Reconcile Billing", "value": "51", "description": "" }, { "name": "Reopened", "value": "16", "description": "" }, { "name": "Resolution Plan", "value": "27", "description": "" }, { "name": "Resolved ", "value": "54", "description": "" }, { "name": "Resource Assigned", "value": "14", "description": "" }, { "name": "Resource Requested", "value": "47", "description": "" }, { "name": "Service Call Scheduled", "value": "30", "description": "" }, { "name": "Tracking Shipment", "value": "56", "description": "" }, { "name": "Waiting Approval", "value": "13", "description": "" }, { "name": "Waiting Customer", "value": "7", "description": "" }, { "name": "Waiting Materials", "value": "9", "description": "" }, { "name": "Waiting Procurement", "value": "65", "description": "" }, { "name": "Waiting Project/Ticket", "value": "71", "description": "" }, { "name": "Waiting Quote Acceptance", "value": "70", "description": "" }, { "name": "Waiting Trivium Employee", "value": "64", "description": "" }, { "name": "Waiting Vendor", "value": "12", "description": "" }, { "name": "Waiting Verification", "value": "21", "description": "" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "subIssueType", "displayName": "Sub issue type (Picklist | subIssueType)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "2FA Setup", "value": "860", "description": "" }, { "name": "365 License Add", "value": "840", "description": "" }, { "name": "365 License Remove", "value": "841", "description": "" }, { "name": "365 License Request", "value": "829", "description": "" }, { "name": "401K", "value": "426", "description": "" }, { "name": "Abacus", "value": "539", "description": "" }, { "name": "Abacus", "value": "593", "description": "" }, { "name": "Access Point", "value": "724", "description": "" }, { "name": "Accessories", "value": "237", "description": "" }, { "name": "Account Compromised", "value": "315", "description": "" }, { "name": "Account Lockout", "value": "775", "description": "" }, { "name": "Active Directory", "value": "158", "description": "" }, { "name": "Active Directory", "value": "369", "description": "" }, { "name": "AD account lockout", "value": "795", "description": "" }, { "name": "Add", "value": "418", "description": "" }, { "name": "Add New User", "value": "522", "description": "" }, { "name": "Add User/Line", "value": "413", "description": "" }, { "name": "Adobe Product(s)", "value": "541", "description": "" }, { "name": "Advanced Threat Protection Drop Ale", "value": "786", "description": "" }, { "name": "Agent disabled", "value": "788", "description": "" }, { "name": "AMS 360", "value": "767", "description": "" }, { "name": "Android App Issue", "value": "421", "description": "" }, { "name": "AntiVirus (Not Wulf Managed)", "value": "318", "description": "" }, { "name": "Appgate", "value": "890", "description": "" }, { "name": "Apple Server", "value": "728", "description": "" }, { "name": "Apple Workstation", "value": "727", "description": "" }, { "name": "Apple Workstation", "value": "732", "description": "" }, { "name": "Ardagh Help Desk", "value": "520", "description": "" }, { "name": "Aruba 2530/40 EOL", "value": "885", "description": "" }, { "name": "Audio", "value": "372", "description": "" }, { "name": "Audio", "value": "804", "description": "" }, { "name": "Audio Device Disconnected", "value": "782", "description": "" }, { "name": "Audio Visual", "value": "825", "description": "" }, { "name": "Auto-complete", "value": "569", "description": "" }, { "name": "AutoCAD", "value": "389", "description": "" }, { "name": "AutoCAD", "value": "532", "description": "" }, { "name": "AutoCAD", "value": "581", "description": "" }, { "name": "Autotask PSA", "value": "687", "description": "" }, { "name": "Auvik", "value": "573", "description": "" }, { "name": "Auvik", "value": "696", "description": "" }, { "name": "Auvik Collector Disconnected", "value": "680", "description": "" }, { "name": "Backup: Veeam Agent for Microsoft Windows", "value": "637", "description": "" }, { "name": "Backup: Veeam Backup & Replication", "value": "634", "description": "" }, { "name": "BAQ", "value": "509", "description": "" }, { "name": "BarTender", "value": "712", "description": "" }, { "name": "Battery Replace Indicator", "value": "287", "description": "" }, { "name": "Battery Status", "value": "285", "description": "" }, { "name": "Billing", "value": "309", "description": "" }, { "name": "BitLocker", "value": "764", "description": "" }, { "name": "Bitwarden", "value": "851", "description": "" }, { "name": "Bitwarden setup", "value": "849", "description": "" }, { "name": "Blackberry", "value": "105", "description": "" }, { "name": "Bluebeam", "value": "534", "description": "" }, { "name": "BlueBeam", "value": "579", "description": "" }, { "name": "Blumira", "value": "904", "description": "" }, { "name": "Blumira", "value": "908", "description": "" }, { "name": "Breach", "value": "553", "description": "" }, { "name": "Brightsign", "value": "843", "description": "" }, { "name": "Budget Planning", "value": "930", "description": "" }, { "name": "Bulk Order", "value": "918", "description": "" }, { "name": "Bypass Enabled", "value": "776", "description": "" }, { "name": "Cables & Parts", "value": "361", "description": "" }, { "name": "Calendar Permissions", "value": "571", "description": "" }, { "name": "CallTower", "value": "564", "description": "" }, { "name": "Capacity Expansion", "value": "923", "description": "" }, { "name": "Carrier Websites", "value": "273", "description": "" }, { "name": "Cell Phone", "value": "735", "description": "" }, { "name": "Change management", "value": "450", "description": "" }, { "name": "Change Reqeust", "value": "609", "description": "" }, { "name": "Change Request", "value": "514", "description": "" }, { "name": "Change Request", "value": "599", "description": "" }, { "name": "Change Request", "value": "602", "description": "" }, { "name": "Change Request", "value": "604", "description": "" }, { "name": "Change Request", "value": "605", "description": "" }, { "name": "Change Request", "value": "612", "description": "" }, { "name": "Chirotouch", "value": "293", "description": "" }, { "name": "Chirotouch", "value": "639", "description": "" }, { "name": "Chrome", "value": "542", "description": "" }, { "name": "Circuit", "value": "126", "description": "" }, { "name": "Citrix Share File", "value": "335", "description": "" }, { "name": "Client Audit", "value": "238", "description": "" }, { "name": "Client Budgeting", "value": "879", "description": "" }, { "name": "Client Business Review", "value": "239", "description": "" }, { "name": "Client Consultation Service", "value": "892", "description": "" }, { "name": "Client Offboarding", "value": "304", "description": "" }, { "name": "Client Onboarding", "value": "303", "description": "" }, { "name": "Client Request for Order", "value": "887", "description": "" }, { "name": "Client Request for Quote", "value": "886", "description": "" }, { "name": "Client Service Request", "value": "880", "description": "" }, { "name": "Client Technology Alignment Review", "value": "891", "description": "" }, { "name": "CloudRadial SaaS", "value": "740", "description": "" }, { "name": "Compromised Account", "value": "552", "description": "" }, { "name": "Conditional Access Policy", "value": "859", "description": "" }, { "name": "Conest", "value": "861", "description": "" }, { "name": "Conferencing Equipment Other", "value": "567", "description": "" }, { "name": "ConnectWise Control", "value": "497", "description": "" }, { "name": "Controller (iPad)", "value": "779", "description": "" }, { "name": "Cornerstone", "value": "292", "description": "" }, { "name": "Cornerstone", "value": "640", "description": "" }, { "name": "Counterpoint", "value": "643", "description": "" }, { "name": "CPU Fan Status", "value": "281", "description": "" }, { "name": "CPU Performance", "value": "439", "description": "" }, { "name": "Creo", "value": "834", "description": "" }, { "name": "Customer Specific", "value": "116", "description": "" }, { "name": "DarkWeb ID", "value": "697", "description": "" }, { "name": "Dash", "value": "713", "description": "" }, { "name": "Dashboard", "value": "511", "description": "" }, { "name": "Datto Managed Power", "value": "741", "description": "" }, { "name": "Datto RMM", "value": "688", "description": "" }, { "name": "Datto Work Place", "value": "341", "description": "" }, { "name": "Decommission", "value": "719", "description": "" }, { "name": "Decommission Workstation", "value": "718", "description": "" }, { "name": "Deltek", "value": "535", "description": "" }, { "name": "Deltek", "value": "584", "description": "" }, { "name": "Dentrix", "value": "817", "description": "" }, { "name": "Deployment", "value": "521", "description": "" }, { "name": "Desk Director", "value": "811", "description": "" }, { "name": "Desktop", "value": "248", "description": "" }, { "name": "Desktop - Outlook", "value": "451", "description": "" }, { "name": "Desktop App Issue", "value": "416", "description": "" }, { "name": "Desktop App. (Non Standard)", "value": "225", "description": "" }, { "name": "Desktop App. (Standard)", "value": "160", "description": "" }, { "name": "Desktop App. (Standard)", "value": "226", "description": "" }, { "name": "Desktop/Laptop", "value": "932", "description": "" }, { "name": "DHCP", "value": "162", "description": "" }, { "name": "Disk usage", "value": "438", "description": "" }, { "name": "Display", "value": "745", "description": "" }, { "name": "Distributed File System Replication is Degraded", "value": "675", "description": "" }, { "name": "Distribution Group", "value": "771", "description": "" }, { "name": "DMARC - SPF/DKIM", "value": "714", "description": "" }, { "name": "DNS", "value": "135", "description": "" }, { "name": "DNS", "value": "163", "description": "" }, { "name": "Docking Station", "value": "769", "description": "" }, { "name": "Domain Controller Monitoring", "value": "614", "description": "" }, { "name": "Domain Names", "value": "572", "description": "" }, { "name": "Drive Mappings", "value": "761", "description": "" }, { "name": "DTR (TMM)", "value": "708", "description": "" }, { "name": "DUO Enrollment", "value": "813", "description": "" }, { "name": "DUO Lockout", "value": "758", "description": "" }, { "name": "DUO MFA", "value": "883", "description": "" }, { "name": "Duplicate", "value": "211", "description": "" }, { "name": "DynDNS", "value": "699", "description": "" }, { "name": "Ebonds - Zapier", "value": "869", "description": "" }, { "name": "Ebonds - Gravity Forms", "value": "867", "description": "" }, { "name": "Ebonds - Sharepoint", "value": "868", "description": "" }, { "name": "eDiscovery", "value": "711", "description": "" }, { "name": "Edit User/Line", "value": "415", "description": "" }, { "name": "Egnyte", "value": "766", "description": "" }, { "name": "Elevate Permissions", "value": "765", "description": "" }, { "name": "Email", "value": "118", "description": "" }, { "name": "Email", "value": "122", "description": "" }, { "name": "Email Signatures", "value": "568", "description": "" }, { "name": "Emergency Replacement", "value": "924", "description": "" }, { "name": "Encryption", "value": "113", "description": "" }, { "name": "End of Life Replacement", "value": "925", "description": "" }, { "name": "Enom", "value": "698", "description": "" }, { "name": "Environmental", "value": "472", "description": "" }, { "name": "Epicor", "value": "587", "description": "" }, { "name": "Evaluation", "value": "546", "description": "" }, { "name": "Event logs", "value": "437", "description": "" }, { "name": "Exal MES Related", "value": "259", "description": "" }, { "name": "Exchange", "value": "109", "description": "" }, { "name": "Expansion Opportunity", "value": "927", "description": "" }, { "name": "Failure - Out of Warranty", "value": "544", "description": "" }, { "name": "Failure - Under Warranty", "value": "545", "description": "" }, { "name": "False Alert", "value": "212", "description": "" }, { "name": "Fax", "value": "847", "description": "" }, { "name": "Fax & vFax", "value": "133", "description": "" }, { "name": "Fax & vFax", "value": "503", "description": "" }, { "name": "Fiix", "value": "715", "description": "" }, { "name": "File Permissions", "value": "760", "description": "" }, { "name": "FileZilla", "value": "820", "description": "" }, { "name": "FireFox", "value": "543", "description": "" }, { "name": "Firewall", "value": "124", "description": "" }, { "name": "Firewall", "value": "166", "description": "" }, { "name": "Firewall", "value": "198", "description": "" }, { "name": "Firewall", "value": "244", "description": "" }, { "name": "Firewall", "value": "324", "description": "" }, { "name": "Firewall", "value": "445", "description": "" }, { "name": "Firewall", "value": "721", "description": "" }, { "name": "Firmware", "value": "210", "description": "" }, { "name": "Firmware", "value": "235", "description": "" }, { "name": "Forward Setup", "value": "862", "description": "" }, { "name": "Foundation", "value": "641", "description": "" }, { "name": "FoxPro", "value": "750", "description": "" }, { "name": "Full Disk Encryption", "value": "111", "description": "" }, { "name": "General", "value": "117", "description": "" }, { "name": "GPO", "value": "371", "description": "" }, { "name": "Group Policy", "value": "167", "description": "" }, { "name": "Group Policy", "value": "398", "description": "" }, { "name": "HaaS (Lifecycle)", "value": "856", "description": "" }, { "name": "HaaS (New)", "value": "857", "description": "" }, { "name": "Handset Issue", "value": "422", "description": "" }, { "name": "Hardware", "value": "119", "description": "" }, { "name": "Hardware", "value": "423", "description": "" }, { "name": "Hardware", "value": "556", "description": "" }, { "name": "Hardware Failure", "value": "920", "description": "" }, { "name": "Hardware Issue", "value": "397", "description": "" }, { "name": "Hardware Purchase", "value": "914", "description": "" }, { "name": "Hardware Support", "value": "466", "description": "" }, { "name": "Hardware Upgrade", "value": "921", "description": "" }, { "name": "Health Benefits", "value": "425", "description": "" }, { "name": "Home PC Performance", "value": "530", "description": "" }, { "name": "Huntress", "value": "481", "description": "" }, { "name": "Huntress Detection", "value": "778", "description": "" }, { "name": "Huntress Detection 365", "value": "777", "description": "" }, { "name": "HuntressAgent' isStopped", "value": "866", "description": "" }, { "name": "Hypervisor CPU Module", "value": "668", "description": "" }, { "name": "Hypervisor Hard Drive", "value": "667", "description": "" }, { "name": "Hypervisor Power Supply", "value": "669", "description": "" }, { "name": "Hypervisor RAM Module", "value": "670", "description": "" }, { "name": "HyperVisor: ESXi", "value": "621", "description": "" }, { "name": "HyperVisor: Hyper-V", "value": "774", "description": "" }, { "name": "Image Right", "value": "272", "description": "" }, { "name": "Image Right", "value": "577", "description": "" }, { "name": "Inbound Calling", "value": "409", "description": "" }, { "name": "Incident Response", "value": "909", "description": "" }, { "name": "Incoming", "value": "115", "description": "" }, { "name": "Informational", "value": "874", "description": "" }, { "name": "Internal Meeting", "value": "549", "description": "" }, { "name": "Internet", "value": "45", "description": "" }, { "name": "Internet", "value": "49", "description": "" }, { "name": "Internet", "value": "61", "description": "" }, { "name": "Internet", "value": "80", "description": "" }, { "name": "Internet", "value": "98", "description": "" }, { "name": "Internet", "value": "504", "description": "" }, { "name": "Internet Connection is Lost", "value": "676", "description": "" }, { "name": "Intranet/LAN", "value": "46", "description": "" }, { "name": "Intranet/LAN", "value": "50", "description": "" }, { "name": "Intranet/LAN", "value": "62", "description": "" }, { "name": "Intranet/LAN", "value": "81", "description": "" }, { "name": "Intranet/LAN", "value": "99", "description": "" }, { "name": "Intrusion Prevention", "value": "784", "description": "" }, { "name": "Inventory Management", "value": "528", "description": "" }, { "name": "iPad", "value": "720", "description": "" }, { "name": "iPad", "value": "734", "description": "" }, { "name": "iPhone App Issue", "value": "420", "description": "" }, { "name": "IPSec Tunnel", "value": "783", "description": "" }, { "name": "IQMS", "value": "797", "description": "" }, { "name": "ISP", "value": "462", "description": "" }, { "name": "Issue Receiving", "value": "313", "description": "" }, { "name": "Issue Sending", "value": "312", "description": "" }, { "name": "IT Staff Tools", "value": "704", "description": "" }, { "name": "Kerri Door System", "value": "835", "description": "" }, { "name": "Kill performed", "value": "792", "description": "" }, { "name": "Kofax", "value": "833", "description": "" }, { "name": "Laptop", "value": "561", "description": "" }, { "name": "Large File Sending", "value": "493", "description": "" }, { "name": "Last Pass", "value": "858", "description": "" }, { "name": "Lenovo Warranty Claim", "value": "865", "description": "" }, { "name": "Licensing Change", "value": "353", "description": "" }, { "name": "Lifecycle Refresh", "value": "928", "description": "" }, { "name": "Lighthouse Alert", "value": "794", "description": "" }, { "name": "Limble", "value": "827", "description": "" }, { "name": "Liongard", "value": "701", "description": "" }, { "name": "LOB Support", "value": "463", "description": "" }, { "name": "Local Admin Rights Request", "value": "828", "description": "" }, { "name": "LogMeIn", "value": "498", "description": "" }, { "name": "Low Bandwidth", "value": "781", "description": "" }, { "name": "Low Battery Charge", "value": "894", "description": "" }, { "name": "Low Disk Space", "value": "396", "description": "" }, { "name": "Lumion", "value": "803", "description": "" }, { "name": "Mailbox Delegation", "value": "570", "description": "" }, { "name": "Mailbox Full", "value": "838", "description": "" }, { "name": "Malvertising", "value": "816", "description": "" }, { "name": "Malware", "value": "554", "description": "" }, { "name": "Managed Power", "value": "393", "description": "" }, { "name": "Microsoft 365 Backup", "value": "884", "description": "" }, { "name": "Mimecast", "value": "703", "description": "" }, { "name": "Mimecast - Allow Sender", "value": "707", "description": "" }, { "name": "Mimecast - Block Sender", "value": "832", "description": "" }, { "name": "Mimecast - DKIM", "value": "807", "description": "" }, { "name": "Mimecast - DMARC", "value": "808", "description": "" }, { "name": "Mimecast - Message Tracking", "value": "806", "description": "" }, { "name": "Mimecast - Release Email", "value": "706", "description": "" }, { "name": "Mimecast - SPF", "value": "809", "description": "" }, { "name": "Mimecast - TTP", "value": "845", "description": "" }, { "name": "Mimecast - URL Protection", "value": "812", "description": "" }, { "name": "Mimecast Plugin", "value": "773", "description": "" }, { "name": "Mimecast Portal", "value": "772", "description": "" }, { "name": "Misc Issue", "value": "512", "description": "" }, { "name": "MiSys", "value": "709", "description": "" }, { "name": "Mobile", "value": "452", "description": "" }, { "name": "Mobile App Issue", "value": "417", "description": "" }, { "name": "Mobile Device", "value": "173", "description": "" }, { "name": "Modem", "value": "246", "description": "" }, { "name": "Modification", "value": "311", "description": "" }, { "name": "Modify", "value": "419", "description": "" }, { "name": "Monitor", "value": "327", "description": "" }, { "name": "MS Excel", "value": "842", "description": "" }, { "name": "MS Office", "value": "332", "description": "" }, { "name": "MS OneDrive", "value": "345", "description": "" }, { "name": "MS Powerpoint", "value": "800", "description": "" }, { "name": "MS Project", "value": "836", "description": "" }, { "name": "MS Skype", "value": "562", "description": "" }, { "name": "MS Teams", "value": "566", "description": "" }, { "name": "MS Teams", "value": "798", "description": "" }, { "name": "MS Word", "value": "799", "description": "" }, { "name": "MSP Tool", "value": "407", "description": "" }, { "name": "N/A", "value": "271", "description": "" }, { "name": "N/A", "value": "442", "description": "" }, { "name": "N/A", "value": "448", "description": "" }, { "name": "N/A", "value": "477", "description": "" }, { "name": "N/A", "value": "502", "description": "" }, { "name": "NAS / SAN", "value": "216", "description": "" }, { "name": "NAS /SAN", "value": "227", "description": "" }, { "name": "Network Element Offline", "value": "681", "description": "" }, { "name": "Network: Firewalls - Sophos XG", "value": "622", "description": "" }, { "name": "Network: NAS Devices - Synology", "value": "615", "description": "" }, { "name": "Network: Switches - HP_Aruba", "value": "630", "description": "" }, { "name": "Network: Unifi APs", "value": "903", "description": "" }, { "name": "Network: UPS Devices - APC", "value": "620", "description": "" }, { "name": "Networking", "value": "531", "description": "" }, { "name": "Networking Equipment", "value": "934", "description": "" }, { "name": "New active threat", "value": "790", "description": "" }, { "name": "New MSA", "value": "302", "description": "" }, { "name": "New request", "value": "310", "description": "" }, { "name": "New Security Tool (MSA)", "value": "824", "description": "" }, { "name": "New Software", "value": "822", "description": "" }, { "name": "Newforma", "value": "533", "description": "" }, { "name": "Newforma", "value": "685", "description": "" }, { "name": "Nextiva", "value": "499", "description": "" }, { "name": "Nextiva", "value": "563", "description": "" }, { "name": "Nextiva Specific Issue", "value": "266", "description": "" }, { "name": "Nitro Pro PDF", "value": "588", "description": "" }, { "name": "No Survey", "value": "262", "description": "" }, { "name": "Non-Deliverable", "value": "257", "description": "" }, { "name": "Non-Windows Server", "value": "330", "description": "" }, { "name": "Not Detected", "value": "876", "description": "" }, { "name": "Not Running", "value": "875", "description": "" }, { "name": "Not Up To Date", "value": "877", "description": "" }, { "name": "O365 ADD", "value": "432", "description": "" }, { "name": "O365 Password", "value": "434", "description": "" }, { "name": "O365 REMOVE", "value": "433", "description": "" }, { "name": "O365 SPAM", "value": "431", "description": "" }, { "name": "Office Move", "value": "731", "description": "" }, { "name": "Office Move", "value": "815", "description": "" }, { "name": "Offline", "value": "276", "description": "" }, { "name": "Offline", "value": "284", "description": "" }, { "name": "OpenDNS", "value": "692", "description": "" }, { "name": "Operating System", "value": "557", "description": "" }, { "name": "Operational", "value": "871", "description": "" }, { "name": "Optimization - Server", "value": "218", "description": "" }, { "name": "Other", "value": "232", "description": "" }, { "name": "Other", "value": "247", "description": "" }, { "name": "Other", "value": "251", "description": "" }, { "name": "Other", "value": "255", "description": "" }, { "name": "Other", "value": "258", "description": "" }, { "name": "Other", "value": "265", "description": "" }, { "name": "Other", "value": "275", "description": "" }, { "name": "Other", "value": "300", "description": "" }, { "name": "Other", "value": "317", "description": "" }, { "name": "Other", "value": "329", "description": "" }, { "name": "Other", "value": "357", "description": "" }, { "name": "Other", "value": "364", "description": "" }, { "name": "Other", "value": "370", "description": "" }, { "name": "Other", "value": "373", "description": "" }, { "name": "Other", "value": "385", "description": "" }, { "name": "Other", "value": "386", "description": "" }, { "name": "Other", "value": "399", "description": "" }, { "name": "Other", "value": "400", "description": "" }, { "name": "Other", "value": "401", "description": "" }, { "name": "Other", "value": "402", "description": "" }, { "name": "Other", "value": "403", "description": "" }, { "name": "Other", "value": "404", "description": "" }, { "name": "Other", "value": "412", "description": "" }, { "name": "Other", "value": "424", "description": "" }, { "name": "Other", "value": "429", "description": "" }, { "name": "Other", "value": "435", "description": "" }, { "name": "Other", "value": "467", "description": "" }, { "name": "Other", "value": "479", "description": "" }, { "name": "Other", "value": "496", "description": "" }, { "name": "Other", "value": "508", "description": "" }, { "name": "Other", "value": "730", "description": "" }, { "name": "Other", "value": "762", "description": "" }, { "name": "Other Hardware", "value": "938", "description": "" }, { "name": "Out of Office", "value": "839", "description": "" }, { "name": "Outbound", "value": "114", "description": "" }, { "name": "Outbound Calling", "value": "410", "description": "" }, { "name": "Outbound Issue", "value": "362", "description": "" }, { "name": "Outlook", "value": "110", "description": "" }, { "name": "Outlook / Offline", "value": "108", "description": "" }, { "name": "Output Load Amps", "value": "290", "description": "" }, { "name": "Output Load Watts", "value": "289", "description": "" }, { "name": "Output Status", "value": "288", "description": "" }, { "name": "Pardot", "value": "805", "description": "" }, { "name": "Passportal", "value": "690", "description": "" }, { "name": "Password Reset", "value": "759", "description": "" }, { "name": "Patching", "value": "193", "description": "" }, { "name": "Paycheck", "value": "427", "description": "" }, { "name": "Paycom", "value": "428", "description": "" }, { "name": "PBX", "value": "206", "description": "" }, { "name": "PBX", "value": "500", "description": "" }, { "name": "PepWave | CradlePoint", "value": "263", "description": "" }, { "name": "Performance", "value": "555", "description": "" }, { "name": "Performance - Slow PC", "value": "560", "description": "" }, { "name": "Performance Resolution", "value": "922", "description": "" }, { "name": "Peripheral", "value": "376", "description": "" }, { "name": "Peripheral(s)", "value": "505", "description": "" }, { "name": "Peripherals/Accessories", "value": "936", "description": "" }, { "name": "Phishing", "value": "316", "description": "" }, { "name": "Phishing", "value": "910", "description": "" }, { "name": "Phising:Attatchment", "value": "854", "description": "" }, { "name": "Phising:Credential Harvesting", "value": "853", "description": "" }, { "name": "Phising:Link", "value": "852", "description": "" }, { "name": "Phone", "value": "44", "description": "" }, { "name": "Phone", "value": "48", "description": "" }, { "name": "Phone", "value": "79", "description": "" }, { "name": "Phone", "value": "96", "description": "" }, { "name": "Phone", "value": "103", "description": "" }, { "name": "Phone", "value": "375", "description": "" }, { "name": "Phone", "value": "826", "description": "" }, { "name": "Phone System", "value": "729", "description": "" }, { "name": "PMC", "value": "689", "description": "" }, { "name": "Point of Sale", "value": "87", "description": "" }, { "name": "Point of Sale", "value": "88", "description": "" }, { "name": "Point of Sale", "value": "92", "description": "" }, { "name": "Point of Sale", "value": "93", "description": "" }, { "name": "Point of Sale", "value": "97", "description": "" }, { "name": "POS Pizza", "value": "644", "description": "" }, { "name": "Possible Power Outage", "value": "893", "description": "" }, { "name": "Power", "value": "717", "description": "" }, { "name": "Power Status", "value": "279", "description": "" }, { "name": "PowerBI", "value": "591", "description": "" }, { "name": "Preactor", "value": "296", "description": "" }, { "name": "Primary ISP Down", "value": "260", "description": "" }, { "name": "Printer", "value": "17", "description": "" }, { "name": "Printer", "value": "34", "description": "" }, { "name": "Printer", "value": "64", "description": "" }, { "name": "Printer", "value": "85", "description": "" }, { "name": "Printer", "value": "102", "description": "" }, { "name": "Printer", "value": "127", "description": "" }, { "name": "Printer", "value": "228", "description": "" }, { "name": "Printer", "value": "374", "description": "" }, { "name": "Printing", "value": "377", "description": "" }, { "name": "Processes and services", "value": "440", "description": "" }, { "name": "Production Lines (MES)", "value": "264", "description": "" }, { "name": "PSA", "value": "575", "description": "" }, { "name": "Pulse Secure VPN", "value": "796", "description": "" }, { "name": "QBR Identified Need", "value": "926", "description": "" }, { "name": "Quarantine performed", "value": "787", "description": "" }, { "name": "QuickBooks", "value": "583", "description": "" }, { "name": "Quote", "value": "128", "description": "" }, { "name": "Rackspace", "value": "107", "description": "" }, { "name": "Raid Status", "value": "282", "description": "" }, { "name": "Ransomware", "value": "911", "description": "" }, { "name": "Ransomware: Windows Servers", "value": "747", "description": "" }, { "name": "Ransomware: Windows Workstations", "value": "748", "description": "" }, { "name": "RDP\\RDS Gateway", "value": "495", "description": "" }, { "name": "Receiving Issue", "value": "363", "description": "" }, { "name": "Remote Workforce", "value": "770", "description": "" }, { "name": "Remove User/Line", "value": "414", "description": "" }, { "name": "Renewal", "value": "916", "description": "" }, { "name": "Report", "value": "510", "description": "" }, { "name": "Restore Request", "value": "267", "description": "" }, { "name": "ResWare", "value": "580", "description": "" }, { "name": "Revisto", "value": "864", "description": "" }, { "name": "Revit", "value": "390", "description": "" }, { "name": "Revit", "value": "537", "description": "" }, { "name": "Revit", "value": "582", "description": "" }, { "name": "Risk", "value": "872", "description": "" }, { "name": "Risk Acceptance", "value": "913", "description": "" }, { "name": "Risk Assessment", "value": "863", "description": "" }, { "name": "RMA", "value": "559", "description": "" }, { "name": "RMM", "value": "129", "description": "" }, { "name": "RMM", "value": "219", "description": "" }, { "name": "RMM Agent", "value": "700", "description": "" }, { "name": "RocketCyber", "value": "693", "description": "" }, { "name": "Role Change", "value": "213", "description": "" }, { "name": "Router", "value": "245", "description": "" }, { "name": "Router", "value": "476", "description": "" }, { "name": "Router / Switch", "value": "176", "description": "" }, { "name": "Router / Switch", "value": "229", "description": "" }, { "name": "Safe Sender Validation", "value": "844", "description": "" }, { "name": "Sage", "value": "586", "description": "" }, { "name": "Sage 300", "value": "305", "description": "" }, { "name": "Sage 500", "value": "295", "description": "" }, { "name": "Sagitta", "value": "274", "description": "" }, { "name": "Sagitta", "value": "291", "description": "" }, { "name": "Sagitta", "value": "576", "description": "" }, { "name": "SAN/NAS", "value": "456", "description": "" }, { "name": "SAN/NAS", "value": "474", "description": "" }, { "name": "Scan to Email", "value": "551", "description": "" }, { "name": "Scanning", "value": "550", "description": "" }, { "name": "Secure Messaging", "value": "492", "description": "" }, { "name": "Security Group", "value": "406", "description": "" }, { "name": "Security:Account Locked", "value": "846", "description": "" }, { "name": "Self Test Result", "value": "286", "description": "" }, { "name": "SentinelOne", "value": "763", "description": "" }, { "name": "Server", "value": "11", "description": "" }, { "name": "Server", "value": "28", "description": "" }, { "name": "Server", "value": "60", "description": "" }, { "name": "Server", "value": "78", "description": "" }, { "name": "Server", "value": "95", "description": "" }, { "name": "Server", "value": "123", "description": "" }, { "name": "Server", "value": "230", "description": "" }, { "name": "Server", "value": "444", "description": "" }, { "name": "Server - Authentication Issue", "value": "234", "description": "" }, { "name": "Server/Storage", "value": "933", "description": "" }, { "name": "Service Account", "value": "306", "description": "" }, { "name": "Service Addition", "value": "917", "description": "" }, { "name": "Service Monitor", "value": "905", "description": "" }, { "name": "Shared Mailbox", "value": "814", "description": "" }, { "name": "Sharepoint", "value": "850", "description": "" }, { "name": "Shop Floor Online", "value": "294", "description": "" }, { "name": "Shop Floor Online", "value": "538", "description": "" }, { "name": "Shop Floor Online", "value": "642", "description": "" }, { "name": "Shortell", "value": "565", "description": "" }, { "name": "Simple Shop Floor (SSF)", "value": "710", "description": "" }, { "name": "SketchUp", "value": "585", "description": "" }, { "name": "Slow PC", "value": "256", "description": "" }, { "name": "Smartsheets", "value": "801", "description": "" }, { "name": "SMS iPad App (Hynes)", "value": "768", "description": "" }, { "name": "SoftPro", "value": "589", "description": "" }, { "name": "Software", "value": "16", "description": "" }, { "name": "Software", "value": "33", "description": "" }, { "name": "Software", "value": "83", "description": "" }, { "name": "Software", "value": "94", "description": "" }, { "name": "Software", "value": "101", "description": "" }, { "name": "Software", "value": "408", "description": "" }, { "name": "Software", "value": "447", "description": "" }, { "name": "Software", "value": "558", "description": "" }, { "name": "Software Renewal", "value": "823", "description": "" }, { "name": "Software/License Purchase", "value": "915", "description": "" }, { "name": "Software/Licensing", "value": "935", "description": "" }, { "name": "SolidWorks", "value": "592", "description": "" }, { "name": "Sophos Full Disk Encryption", "value": "695", "description": "" }, { "name": "Sophos MDM", "value": "702", "description": "" }, { "name": "Sophos MDM", "value": "819", "description": "" }, { "name": "Sophos PhishThreat", "value": "691", "description": "" }, { "name": "Sophos PhishThreat", "value": "743", "description": "" }, { "name": "Sophos VPN", "value": "494", "description": "" }, { "name": "Sophos XG EOL", "value": "881", "description": "" }, { "name": "Sophos XG EOL (Currently HaaS)", "value": "888", "description": "" }, { "name": "Sophos XG EOL (Multi-Site)", "value": "889", "description": "" }, { "name": "Sophos:Block Website", "value": "855", "description": "" }, { "name": "Spam", "value": "112", "description": "" }, { "name": "SPAM", "value": "314", "description": "" }, { "name": "Spanning Tree Changed From Forwarding", "value": "674", "description": "" }, { "name": "Spyware/Malware", "value": "106", "description": "" }, { "name": "Stack Switch Member Status Change", "value": "673", "description": "" }, { "name": "Stack Switch Port Status Change", "value": "672", "description": "" }, { "name": "Static IP request", "value": "380", "description": "" }, { "name": "Storage", "value": "326", "description": "" }, { "name": "Storage", "value": "723", "description": "" }, { "name": "Strategic Initiative", "value": "931", "description": "" }, { "name": "Subcontractor", "value": "749", "description": "" }, { "name": "Subscription License", "value": "878", "description": "" }, { "name": "Survey", "value": "261", "description": "" }, { "name": "Suspect", "value": "821", "description": "" }, { "name": "Switch", "value": "125", "description": "" }, { "name": "Switch", "value": "222", "description": "" }, { "name": "Switch", "value": "325", "description": "" }, { "name": "Switch", "value": "455", "description": "" }, { "name": "Switch", "value": "473", "description": "" }, { "name": "Switch", "value": "722", "description": "" }, { "name": "SysPro", "value": "590", "description": "" }, { "name": "System Error", "value": "513", "description": "" }, { "name": "System Error", "value": "516", "description": "" }, { "name": "System Error", "value": "517", "description": "" }, { "name": "System Error", "value": "518", "description": "" }, { "name": "System Error", "value": "519", "description": "" }, { "name": "System Error", "value": "600", "description": "" }, { "name": "System Error", "value": "608", "description": "" }, { "name": "System Fan Status", "value": "283", "description": "" }, { "name": "System Status", "value": "277", "description": "" }, { "name": "System Temperature", "value": "278", "description": "" }, { "name": "Tablet", "value": "736", "description": "" }, { "name": "Teams Room", "value": "810", "description": "" }, { "name": "Technology Upgrade", "value": "929", "description": "" }, { "name": "Threat", "value": "870", "description": "" }, { "name": "Threat Mitigation Alert", "value": "789", "description": "" }, { "name": "TimeZest SaaS", "value": "739", "description": "" }, { "name": "Too Many Sign In Attempts", "value": "785", "description": "" }, { "name": "Upgrade", "value": "547", "description": "" }, { "name": "UPS", "value": "392", "description": "" }, { "name": "UPS", "value": "471", "description": "" }, { "name": "UPS", "value": "830", "description": "" }, { "name": "UPS - Low Battery Charge", "value": "678", "description": "" }, { "name": "UPS - Possible Power Outage", "value": "677", "description": "" }, { "name": "UPS WorldShip", "value": "837", "description": "" }, { "name": "User", "value": "120", "description": "" }, { "name": "User Account", "value": "179", "description": "" }, { "name": "User at Risk Alert", "value": "831", "description": "" }, { "name": "User at risk detected", "value": "793", "description": "" }, { "name": "User enabled agent", "value": "791", "description": "" }, { "name": "User Error", "value": "515", "description": "" }, { "name": "User Error", "value": "601", "description": "" }, { "name": "User Error", "value": "603", "description": "" }, { "name": "User Error", "value": "606", "description": "" }, { "name": "User Error", "value": "607", "description": "" }, { "name": "User Error", "value": "610", "description": "" }, { "name": "User Error", "value": "611", "description": "" }, { "name": "User Termination", "value": "526", "description": "" }, { "name": "Vendor Issue", "value": "381", "description": "" }, { "name": "Verizon Phone System", "value": "848", "description": "" }, { "name": "Video Device Disconnected", "value": "780", "description": "" }, { "name": "Virtualization", "value": "475", "description": "" }, { "name": "Voice Services", "value": "464", "description": "" }, { "name": "Voicemail", "value": "411", "description": "" }, { "name": "VoIP", "value": "436", "description": "" }, { "name": "VPN", "value": "181", "description": "" }, { "name": "VPN", "value": "199", "description": "" }, { "name": "VPN", "value": "449", "description": "" }, { "name": "VPN site to site Issue", "value": "358", "description": "" }, { "name": "Vulnerability Management", "value": "912", "description": "" }, { "name": "Warning", "value": "873", "description": "" }, { "name": "Warranty Claim", "value": "461", "description": "" }, { "name": "Warranty Replacement", "value": "919", "description": "" }, { "name": "Warranty/Service Contract", "value": "937", "description": "" }, { "name": "WattBox", "value": "742", "description": "" }, { "name": "Webroot", "value": "694", "description": "" }, { "name": "Website", "value": "405", "description": "" }, { "name": "WiFi", "value": "104", "description": "" }, { "name": "WiFi", "value": "548", "description": "" }, { "name": "WiFi Access Point", "value": "446", "description": "" }, { "name": "WiFi AP", "value": "356", "description": "" }, { "name": "WindChill", "value": "737", "description": "" }, { "name": "Windows 10 EOL", "value": "882", "description": "" }, { "name": "Windows Server", "value": "613", "description": "" }, { "name": "Windows Server", "value": "726", "description": "" }, { "name": "Windows Server", "value": "733", "description": "" }, { "name": "Windows Server: High CPU", "value": "900", "description": "" }, { "name": "Windows Server: High Memory", "value": "898", "description": "" }, { "name": "Windows Server: Low Disk Space", "value": "899", "description": "" }, { "name": "Windows Server: Offline", "value": "901", "description": "" }, { "name": "Windows Servers", "value": "907", "description": "" }, { "name": "Windows Workstation", "value": "323", "description": "" }, { "name": "Windows Workstation", "value": "616", "description": "" }, { "name": "Windows Workstation", "value": "725", "description": "" }, { "name": "Windows Workstation Life-cycle", "value": "738", "description": "" }, { "name": "Windows Workstation New", "value": "322", "description": "" }, { "name": "Windows Workstation Repurpose", "value": "746", "description": "" }, { "name": "Windows Workstation: Low Disk Space", "value": "902", "description": "" }, { "name": "Windows Workstations", "value": "906", "description": "" }, { "name": "Windows: Role - DHCP Server", "value": "624", "description": "" }, { "name": "Windows: Role - DNS Server", "value": "627", "description": "" }, { "name": "Windows: Role - Domain Controller", "value": "626", "description": "" }, { "name": "Windows: Role - Exchange Server", "value": "625", "description": "" }, { "name": "Windows: Role - Remote Desktop Server", "value": "645", "description": "" }, { "name": "Windows: Role - SQL Server Express", "value": "629", "description": "" }, { "name": "Windows: Role - SQL Server Full", "value": "628", "description": "" }, { "name": "WindowsUpdate Server- Patch Failure", "value": "897", "description": "" }, { "name": "WindowsUpdate Server- Reboot Required", "value": "649", "description": "" }, { "name": "WindowsUpdate Workstation- Patch Failure", "value": "896", "description": "" }, { "name": "WindowsUpdate- Reboot Required", "value": "895", "description": "" }, { "name": "Wireless", "value": "190", "description": "" }, { "name": "Wireless", "value": "231", "description": "" }, { "name": "Wiring", "value": "716", "description": "" }, { "name": "Wolfepak", "value": "818", "description": "" }, { "name": "Workstation", "value": "19", "description": "" }, { "name": "Workstation", "value": "32", "description": "" }, { "name": "Workstation", "value": "63", "description": "" }, { "name": "Workstation", "value": "82", "description": "" }, { "name": "Workstation", "value": "100", "description": "" }, { "name": "Workstation", "value": "121", "description": "" }, { "name": "Workstation", "value": "443", "description": "" }, { "name": "Workstation (Lifecycle)", "value": "224", "description": "" }, { "name": "Workstation (New Device)", "value": "233", "description": "" }, { "name": "Xactimate", "value": "536", "description": "" }, { "name": "Xactimate", "value": "578", "description": "" }, { "name": "Zoom", "value": "686", "description": "" }, { "name": "Zoom Room Update", "value": "705", "description": "" }, { "name": "Zoom Rooms", "value": "298", "description": "" }, { "name": "Zoom Voice", "value": "501", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "ticketCategory", "displayName": "Ticket category (Picklist | ticketCategory)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Add New User", "value": "127", "description": "" }, { "name": "Client Success", "value": "149", "description": "" }, { "name": "Customer Offboarding", "value": "123", "description": "" }, { "name": "Customer Onboarding", "value": "121", "description": "" }, { "name": "Decommission Device", "value": "147", "description": "" }, { "name": "Deploy Infrastructure Device", "value": "138", "description": "" }, { "name": "Deploy Misc. Device", "value": "116", "description": "" }, { "name": "Deploy Product Order Only", "value": "154", "description": "" }, { "name": "Deploy Software", "value": "145", "description": "" }, { "name": "Deploy Workstation", "value": "101", "description": "" }, { "name": "IT Operations", "value": "106", "description": "" }, { "name": "Lighthouse Electric Company", "value": "163", "description": "" }, { "name": "Network Operations Center", "value": "2", "description": "" }, { "name": "New Business Development", "value": "152", "description": "" }, { "name": "OLD RFQ", "value": "100", "description": "" }, { "name": "Penn Energy Resources", "value": "162", "description": "" }, { "name": "Post Sale - Order", "value": "136", "description": "" }, { "name": "Premier Automation LLC", "value": "126", "description": "" }, { "name": "Project Delivery (FP)", "value": "113", "description": "" }, { "name": "Project Delivery (Internal)", "value": "137", "description": "" }, { "name": "Project Delivery (TM)", "value": "151", "description": "" }, { "name": "Purchase Order (HaaS)", "value": "156", "description": "" }, { "name": "Purchase Order (Internal)", "value": "165", "description": "" }, { "name": "RMA", "value": "5", "description": "" }, { "name": "RocketCyber Alert", "value": "140", "description": "" }, { "name": "Sales - CSM Generated", "value": "172", "description": "" }, { "name": "Sales - Direct Request", "value": "171", "description": "" }, { "name": "Sales - Lifecycle", "value": "173", "description": "" }, { "name": "Sales - Service Escalation", "value": "170", "description": "" }, { "name": "Security Operations Center", "value": "161", "description": "" }, { "name": "Service Desk", "value": "3", "description": "Default value" }, { "name": "Subcontractor", "value": "150", "description": "" }, { "name": "The Thrasher Group", "value": "131", "description": "" }, { "name": "Ticket Triage", "value": "159", "description": "" }, { "name": "TNT Dynamite Pizza", "value": "133", "description": "" }, { "name": "User Separation", "value": "128", "description": "" }, { "name": "Vendor Support", "value": "155", "description": "" }, { "name": "Vorteq Coil Finishers", "value": "164", "description": "" }, { "name": "Wulf Employee Onboarding", "value": "125", "description": "" }, { "name": "Wulf Employee Separation", "value": "129", "description": "" }, { "name": "WULF ESCALATION DESK", "value": "134", "description": "" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "ticketNumber", "displayName": "Ticket number (String | ticketNumber)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "ticketType", "displayName": "Ticket type (Picklist | ticketType)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Alert", "value": "5", "description": "" }, { "name": "Change Request", "value": "4", "description": "" }, { "name": "Incident", "value": "2", "description": "" }, { "name": "Problem", "value": "3", "description": "" }, { "name": "Service Request", "value": "1", "description": "Default value" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "title", "displayName": "Title (String | title)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": false }, { "id": "Additional Contacts", "displayName": "Additional contacts (1 | Additional Contacts)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "AI Triage Status", "displayName": "Ai triage status (Picklist | AI Triage Status)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "AI Triage Completed", "value": "AI Triage Completed", "description": "" }, { "name": "AI Triage Failed", "value": "AI Triage Failed", "description": "" }, { "name": "AI Triage Request", "value": "AI Triage Request", "description": "" }, { "name": "AI Triage Skipped", "value": "AI Triage Skipped", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Company Ownership", "displayName": "Company ownership (Picklist | Company Ownership)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "AccPac", "value": "AccPac", "description": "" }, { "name": "Lighthouse", "value": "Lighthouse", "description": "" }, { "name": "Preactor", "value": "Preactor", "description": "" }, { "name": "Trivium", "value": "Trivium", "description": "" }, { "name": "Wulf Consulting", "value": "Wulf Consulting", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Company Team Member", "displayName": "Company team member (1 | Company Team Member)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Company Ticket ID#", "displayName": "Company ticket id (1 | Company Ticket ID#)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "CSTicketNumber", "displayName": "Cs ticket number (1 | CSTicketNumber)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Customer Thermometer Temperature", "displayName": "Customer thermometer temperature (1 | Customer Thermometer Temperature)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Equipment Location", "displayName": "Equipment location (1 | Equipment Location)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Exal Division", "displayName": "Exal division (Picklist | Exal Division)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "MES", "value": "MES", "description": "" }, { "name": "Operations", "value": "Operations", "description": "" }, { "name": "South America", "value": "South America", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Issue Type Suggestion", "displayName": "Issue type suggestion (1 | Issue Type Suggestion)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "ITGlue SOP or KB Article", "displayName": "It glue sop or kb article (1 | ITGlue SOP or KB Article)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Job Number", "displayName": "Job number (1 | Job Number)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "New Hire Start Date", "displayName": "New hire start date (1 | New Hire Start Date)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Original Title", "displayName": "Original title (1 | Original Title)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Project Manager", "displayName": "Project manager (Picklist | Project Manager)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Jake Hammel", "value": "Jake Hammel", "description": "" }, { "name": "James Meier", "value": "James Meir", "description": "" }, { "name": "John Stvartak", "value": "John Stvartak", "description": "" }, { "name": "Lorentz Hinrichsen", "value": "Lorentz Hinrichsen", "description": "" }, { "name": "Tom Carlin", "value": "Tom Carlin", "description": "" }, { "name": "Tony Feerst", "value": "Tony Feerst", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Project Technical Lead", "displayName": "Project technical lead (Picklist | Project Technical Lead)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Charles Mathews", "value": "Charles Mathews", "description": "" }, { "name": "James Meier", "value": "James Meier", "description": "" }, { "name": "Lorentz Hinrichsen", "value": "Lorentz Hinrichsen", "description": "" }, { "name": "Steve Cianflone", "value": "Steve Cianflone", "description": "" }, { "name": "Tom Carlin", "value": "Tom Carlin", "description": "" }, { "name": "Tony Feerst", "value": "Tony Feerst", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Purchasing Ticket", "displayName": "Purchasing ticket (1 | Purchasing Ticket)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Quote Number", "displayName": "Quote number (1 | Quote Number)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Review Status", "displayName": "Review status (Picklist | Review Status)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Complete", "value": "Complete", "description": "" }, { "name": "Reconcile Billing", "value": "Reconcile Billing", "description": "" }, { "name": "Waiting CSM Review", "value": "Waiting CSM Review", "description": "" }, { "name": "Waiting Escalation Review", "value": "Waiting Escalation Review", "description": "" }, { "name": "Waiting Huddle Review", "value": "Waiting Huddle Review", "description": "" }, { "name": "Waiting QBR", "value": "Waiting QBR", "description": "" }, { "name": "Waiting TAM Review", "value": "Waiting TAM Review", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Service Delivery Improvement", "displayName": "Service delivery improvement (Picklist | Service Delivery Improvement)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Automation Request", "value": "Automation Request", "description": "" }, { "name": "Checklist Request/Review", "value": "Checklist Request/Review", "description": "" }, { "name": "Documentation Request/Review", "value": "Documentation Request/Review", "description": "" }, { "name": "Interview Ticket", "value": "Interview Ticket", "description": "" }, { "name": "Process Review", "value": "Process Review", "description": "" }, { "name": "QA Review", "value": "QA Review", "description": "" }, { "name": "Ticket Prevention", "value": "Ticket Prevention", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Shipment ETA", "displayName": "Shipment eta (3 | Shipment ETA)", "type": "dateTime", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Shipment Tracking Number(s)", "displayName": "Shipment tracking number s (1 | Shipment Tracking Number(s))", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "SOP Link", "displayName": "Sop link (1 | SOP Link)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Sub Issue Type Suggestion", "displayName": "Sub issue type suggestion (1 | Sub Issue Type Suggestion)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Subcontractor", "displayName": "Subcontractor (Picklist | Subcontractor)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "InTouch Technologies", "value": "InTouch Technologies", "description": "" }, { "name": "MGM Communications", "value": "MGM Communications", "description": "" }, { "name": "Other", "value": "Other", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "TeamsPost", "displayName": "Teams post (Picklist | TeamsPost)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "InventoryManagemet", "value": "Yes", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Termination Date", "displayName": "Termination date (1 | Termination Date)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Work Around In-Place", "displayName": "Work around in place (Picklist | Work Around In-Place)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "No", "value": "No", "description": "" }, { "name": "Unknown", "value": "Unknown", "description": "" }, { "name": "Yes", "value": "Yes", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "WCode", "displayName": "W code (Picklist | WCode)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "CAF", "value": "CAF", "description": "" }, { "name": "Croop", "value": "Croop", "description": "" }, { "name": "EAF", "value": "EAF", "description": "" }, { "name": "LOB01", "value": "LOB01", "description": "" }, { "name": "OS01", "value": "OS01", "description": "" }, { "name": "RO1", "value": "RO1", "description": "" }, { "name": "Security:O365", "value": "Security:O365", "description": "" }, { "name": "Training Request", "value": "TR", "description": "" }, { "name": "UC1", "value": "UC1", "description": "" }, { "name": "User", "value": "User", "description": "" }, { "name": "VendorBug", "value": "VendorBug", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "zOrphanLabtech-LabTechID", "displayName": "Z orphan labtech lab tech ID (1 | zOrphanLabtech-LabTechID)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "zOrphanLabtech-LTAlertID", "displayName": "Z orphan labtech lt alert ID (1 | zOrphanLabtech-LTAlertID)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true } ], "attemptToConvertTypes": false, "convertFieldsToString": false } }, "type": "n8n-nodes-autotask.autotask", "typeVersion": 1, "position": [ 2656, 960 ], "id": "452a8966-8e6c-4b6c-b1f6-2c578c9d1610", "name": "Update a ticket1", "credentials": { "autotaskApi": { "id": "5IwoEmby4IbJUtEn", "name": "Autotask account 2" } } }, { "parameters": { "promptType": "define", "text": "=# User Message: SOC Alert Processing\n\nYou are processing a Security Operations Center (SOC) security alert that requires validation and internal analysis.\n\n**CRITICAL: This is a SOC ticket (Category 161). You MUST validate and correct the classification if needed.**\n\n---\n\n## Ticket Data\n\n**ID:** {{ $json.id }} \n**Ticket Number:** {{ $json.ticketNumber }} \n**Current Title:** {{ $json.title }} \n**Current Description:** {{ $json.description }} \n\n---\n\n## Current Classification (REQUIRES VALIDATION)\n\n- **Type:** {{ $json.ticketType }} ({{ $json.ticketType_label }}) \n- **Priority:** {{ $json.priority }} ({{ $json.priority_label }}) \n- **Category:** 161 (Security Operations Center) \n- **Issue Type:** {{ $json.issueType }} \n- **Sub-Issue Type:** {{ $json.subIssueType }} \n- **Current Queue:** {{ $json.queueID }} \n\n**Additional Context:**\n- **Created:** {{ $json.createDate }} \n- **Company:** {{ $json.companyID }} \n- **Source:** Automated Security Monitoring \n\n---\n\n## Your Task - Four Steps\n\n### Step 1: VALIDATE AND CORRECT CLASSIFICATION\n\n**CRITICAL SOC RULE:** Security alerts must be classified as Incidents or Alerts, NEVER Service Requests.\n\n**Classification Corrections Required:**\n\n1. **Ticket Type Validation:**\n - Current value: {{ $json.ticketType }}\n - ❌ If current value = 1 (Service Request) → CORRECT to 2 (Incident)\n - ✅ If current value = 2 (Incident) → Keep as 2\n - ✅ If current value = 5 (Alert) → Keep as 5\n - **OUTPUT: Use corrected value in FieldIDs block**\n\n2. **Priority Validation:**\n - Current value: {{ $json.priority }}\n - Valid SOC priorities: 2 (Medium), 4 (Critical), 6 (High)\n - Invalid priorities: 1, 3, 8, 9, 11\n - **If current priority is invalid, use 6 (High) as default**\n - **OUTPUT: Use corrected value in FieldIDs block**\n\n3. **Field Preservation:**\n - ✅ Keep ticketCategory = 161 (do not change)\n - ✅ Keep issueType = {{ $json.issueType }} (preserve current value, even if empty/null)\n - ✅ Keep subIssueType = {{ $json.subIssueType }} (preserve current value, even if empty/null)\n - ✅ Keep contactID = {{ $json.contactID }} (preserve current value, even if empty/null)\n - ✅ Set queueID = 29682969 (Level 2 Support - Security)\n\n---\n\n### Step 2: EVALUATE TITLE QUALITY\n\n**Determine if the current title needs improvement or can be preserved as-is.**\n\n**Current Title:** {{ $json.title }}\n\n**Title Quality Assessment:**\n\n**PRESERVE the title if:**\n- It clearly identifies the security event type\n- It includes the affected resource (user, device, system)\n- It's concise and readable (under 150 characters)\n- It already has proper formatting\n\n**Examples of titles to PRESERVE:**\n- \"Phishing Alert - user@company.com - Suspicious Link Detected\"\n- \"[Phish Alert] Reported Email - john.smith@company.com\"\n- \"Malware Detection - DESKTOP-ABC123 - Trojan Blocked\"\n- \"Failed Login Attempts - admin@domain.com\"\n\n**CLEAN UP the title if:**\n- It contains system-generated UUIDs or GUIDs in the middle of readable text\n- It has excessively long auto-generated suffixes (timestamps, message IDs)\n- It has pipe-separated technical data making it hard to read\n- It has email signatures or disclaimers appended\n\n**When cleaning titles:**\n- Format: `[Alert Type] - [Affected Resource] - [Brief Context]`\n- Keep the core security event information\n- Remove UUIDs, long message IDs, timestamps from the middle or end\n- **CRITICAL: If title starts with `[Phish Alert]` or `[PHISH ALERT]`, you MUST preserve that tag at the beginning**\n- Keep user emails, device names, and security tool names\n\n**Examples of titles to CLEAN:**\n- Before: `Phishing:d92e9896-461e-484d-e07d-08de2785ae1a|noreply@tm.openai.com|(Suspicious email) 11/19/2025 4:19:38 PM`\n- After: `Phishing Alert - noreply@tm.openai.com - Suspicious Email Detected`\n\n- Before: `[Phish Alert] UUID-12345|user@company.com|credential request|(Suspicious) timestamp`\n- After: `[Phish Alert] Suspicious Email - user@company.com - Credential Request`\n\n**Your Decision:**\n- If title is clean → Output \"PRESERVE\" and then output the original title exactly as-is\n- If title needs cleanup → Output \"UPDATE\" and provide cleaned version\n\n---\n\n### Step 3: GENERATE INTERNAL TRIAGE NOTE\n\n**Create a comprehensive triage note for the security analyst. This note will be added to the internal notes section and will NOT be visible to the client.**\n\n**Your triage note should include:**\n\n1. **Security Event Summary:**\n - Brief 2-3 sentence overview of what happened\n - Type of security event (phishing, malware, intrusion attempt, policy violation, etc.)\n\n2. **Threat Assessment:**\n - Severity evaluation based on the alert details\n - Potential impact if not addressed\n - Indicators of compromise (IOCs) present\n\n3. **Key Details to Investigate:**\n - Critical IP addresses, domains, or email addresses to analyze\n - Affected users, devices, or systems\n - Timeline of suspicious activity\n - Authentication failures or anomalies\n\n4. **Recommended Next Steps:**\n - Immediate actions the analyst should take\n - What to verify or validate\n - Whether escalation is needed\n - Any containment actions to consider\n\n5. **Pattern Recognition (if applicable):**\n - Similar recent incidents\n - Known campaign or threat actor patterns\n - Related alerts that may be connected\n\n**Triage Note Format:**\n```\n=== SOC TRIAGE ANALYSIS ===\n\n[Security Event Summary]\n\nTHREAT ASSESSMENT:\n[Your assessment here]\n\nKEY DETAILS TO INVESTIGATE:\n- [Detail 1]\n- [Detail 2]\n- [Detail 3]\n\nRECOMMENDED NEXT STEPS:\n1. [Action 1]\n2. [Action 2]\n3. [Action 3]\n\n[Pattern Recognition section if applicable]\n\n=== END TRIAGE ===\n```\n\n**IMPORTANT:** Do NOT modify the ticket description. The original security alert data in the description must remain exactly as generated by the security monitoring tools.\n\n---\n\n### Step 4: OUTPUT FORMAT\n\n**YOU MUST USE THIS EXACT FORMAT - CHARACTER FOR CHARACTER:**\n\n```\nTicket ID: {{ $json.id }}\n\n### SOC Alert Processing\n\n**Classification Validation:**\n- ticketType: [CORRECTED from X to Y] OR [Validated as Y - No change needed]\n- priority: [CORRECTED from X to Y] OR [Validated as Y - No change needed]\n\n**Field Preservation:**\n✅ issueType: Preserved as [value or null]\n✅ subIssueType: Preserved as [value or null]\n✅ ticketCategory: 161 (Security Operations Center)\n✅ contactID: Preserved as [value or null]\n✅ Description: Preserved as-is (no changes)\n\n**Title Decision**: [PRESERVE or UPDATE]\n\n**Title**: [Output the title here - original if PRESERVE, cleaned if UPDATE]\n\n**Queue Assignment**: 29682969 (Level 2 Support - Security)\n\n**Internal Triage Note**:\n```\n[Your complete triage note using the format from Step 3]\n```\n\n### FieldIDs Output\n```json\n{\n \"ticketType\": [corrected numeric value - 2 or 5, NEVER 1],\n \"priority\": [corrected numeric value - 2, 4, or 6],\n \"ticketCategory\": 161,\n \"issueType\": [preserved value or null],\n \"subIssueType\": [preserved value or null],\n \"contactID\": [preserved value or null],\n \"queueID\": 29682969\n}\n```\n```\n\n**CRITICAL FORMATTING RULES:**\n1. The Internal Triage Note code fence MUST close with ``` BEFORE the FieldIDs section\n2. There MUST be a blank line after the triage note closing ```\n3. The FieldIDs section MUST start with `### FieldIDs Output` header\n4. The FieldIDs JSON MUST have its own separate ```json code fence\n5. Do NOT nest the FieldIDs JSON inside the triage note code fence\n6. **ALWAYS include the Title line - this is REQUIRED in every response**\n\n**Validation Checklist Before Sending:**\n✅ Ticket ID is included at the top \n✅ Classification validation shows what was corrected or validated \n✅ Title Decision is either PRESERVE or UPDATE \n✅ **Title line is present with the actual title (REQUIRED)**\n✅ Description is marked as preserved \n✅ \"Internal Triage Note\" closes with ``` on its own line \n✅ Blank line after triage note closing \n✅ \"### FieldIDs Output\" header exists on its own line \n✅ FieldIDs JSON is in separate ```json code fence \n✅ ticketType is NOT 1 (must be 2 or 5 for SOC alerts) \n✅ All preserved fields show their original values \n\n**Provide your SOC alert analysis now.**", "options": { "systemMessage": "# System Message: SOC Alert Processing\n\nYou are processing Security Operations Center (SOC) security alert tickets from automated security monitoring and detection systems.\n\n---\n\n## 🎯 CRITICAL: Output Format Requirements (MUST FOLLOW EXACTLY)\n\n**Before anything else, understand you MUST use this EXACT output format:**\n\n### Required Output Structure\n\n**CRITICAL: Do NOT wrap your entire response in code fences. Output the text directly.**\n\nYour response should start immediately with:\n```\nTicket ID: [actual_ticket_id_number]\n\n### SOC Alert Processing\n\n**Classification Validation:**\n- ticketType: [your validation result]\n- priority: [your validation result]\n\n**Field Preservation:**\n✅ issueType: Preserved as [actual_value_or_null]\n✅ subIssueType: Preserved as [actual_value_or_null]\n✅ ticketCategory: 161 (Security Operations Center)\n✅ contactID: Preserved as [actual_value_or_null]\n✅ Description: Preserved as-is (no changes)\n\n**Title Decision**: [PRESERVE or UPDATE]\n\n**Title**:\n[Output the title here - either the original title if PRESERVE, or the cleaned title if UPDATE]\n\n**Queue Assignment**: 29682969 (Level 2 Support - Security)\n\n**Internal Triage Note**:\n```\n[Your complete triage note goes here inside this code fence]\n```\n\n### FieldIDs Output\n```json\n{\n \"ticketType\": 2,\n \"priority\": 6,\n \"ticketCategory\": 161,\n \"issueType\": null,\n \"subIssueType\": null,\n \"contactID\": null,\n \"queueID\": 29682969\n}\n```\n```\n\n### Format Rules (Character-for-Character)\n\n1. **Section Headers** - Use `###` followed by space and title\n2. **Bold Labels** - Use `**Label**:` (double asterisks, single colon)\n3. **Title Decision** - Must be exactly \"PRESERVE\" or \"UPDATE\"\n4. **Title Line** - ALWAYS include this with the actual title\n5. **Internal Triage Note** - Label on one line, then triple-backtick code fence\n6. **Triage Note Closing** - Must close with ``` on its own line\n7. **Blank Line** - Must exist after triage note closing ```\n8. **FieldIDs Header** - Must be `### FieldIDs Output` on its own line\n9. **FieldIDs JSON** - Must be in separate ```json code fence (NOT inside triage note)\n10. **Numeric Values** - All IDs must be numbers, NOT strings\n11. **Ticket ID** - Must be first line of output\n\n**Validation Checklist (Check Before Sending):**\n- ✅ Response starts with \"Ticket ID:\" (NOT with triple backticks)\n- ✅ Title Decision is either \"PRESERVE\" or \"UPDATE\"\n- ✅ **Title** line exists with the actual title (always included)\n- ✅ Description marked as preserved (no modifications)\n- ✅ \"Internal Triage Note\" content is inside triple-backtick code fence\n- ✅ Triage note closes with ``` on its own line\n- ✅ Blank line after triage note closing\n- ✅ \"### FieldIDs Output\" header on its own line\n- ✅ FieldIDs in separate ```json code fence (NOT nested in triage note)\n- ✅ All numeric IDs are numbers (not \"2\" but 2)\n- ✅ No code fence wrapping the entire output\n\n---\n\n## 🚨 STEP 1: Classification Validation (Check First)\n\n**All SOC tickets (ticketCategory = 161) MUST have:**\n- ticketType = Incident (2) or Alert (5) - **NEVER Service Request (1)**\n- priority = Critical (4), High (6), or Medium (2) - **NEVER service priorities (8, 9, 11)**\n\n### Validation Logic\n\n**If incoming ticketType = 1 (Service Request):**\n- ❌ This is WRONG for security alerts\n- ✅ CORRECT to 2 (Incident)\n- Output in FieldIDs: `\"ticketType\": 2`\n- State in validation: \"CORRECTED from Service Request (1) to Incident (2)\"\n\n**If incoming ticketType = 2 or 5:**\n- ✅ Already correct\n- Output in FieldIDs: `\"ticketType\": 2` or `\"ticketType\": 5`\n- State in validation: \"Validated as Incident (2) - Correct for SOC\"\n\n**If incoming priority = 1, 3, 8, 9, or 11:**\n- ❌ These are service-level priorities, invalid for security\n- ✅ CORRECT to 6 (High)\n- Output in FieldIDs: `\"priority\": 6`\n- State in validation: \"CORRECTED from [old] to High (6)\"\n\n**If incoming priority = 2, 4, or 6:**\n- ✅ Already correct\n- Output in FieldIDs: `\"priority\": [existing_value]`\n- State in validation: \"Validated as [label] - Appropriate for threat level\"\n\n### Why SOC Alerts are Incidents\n\nSecurity monitoring detected something wrong = Incident (not Service Request)\n- Phishing detection = Incident\n- Failed authentication = Incident\n- Malware alert = Incident\n- Policy violation = Incident\n- Even \"test\" or \"detection\" events = Incident\n\n---\n\n## 🔒 STEP 2: Field Preservation Rules\n\nAfter validating classification above, preserve these field values:\n\n### MUST PRESERVE (Output Original Values):\n- `issueType` - Output exactly as received (even if null/empty)\n- `subIssueType` - Output exactly as received (even if null/empty)\n- `ticketCategory` - Always output 161\n- `contactID` - Output exactly as received (even if null/empty)\n- `description` - **DO NOT MODIFY** - Preserve exactly as-is\n\n### MUST OUTPUT (Corrected Values):\n- `ticketType` - Output the validated/corrected value\n- `priority` - Output the validated/corrected value\n- `queueID` - Always output 29682969\n\n### TITLE HANDLING (Conditional):\n- Evaluate title quality (see Step 3)\n- Either preserve as-is OR provide cleaned version\n\n---\n\n## 📝 STEP 3: Evaluate Title Quality\n\n**Determine if the current title needs improvement or can be preserved as-is.**\n\n### PRESERVE the title if:\n- It clearly identifies the security event type\n- It includes the affected resource (user, device, system)\n- It's concise and readable (under 150 characters)\n- It already has proper formatting\n- It doesn't contain excessive system-generated data\n\n**Examples of titles to PRESERVE:**\n- \"Phishing Alert - user@company.com - Suspicious Link Detected\"\n- \"[Phish Alert] Reported Email - john.smith@company.com\"\n- \"Malware Detection - DESKTOP-ABC123 - Trojan Blocked\"\n- \"Failed Login Attempts - admin@domain.com\"\n- \"DUO Security Alert - jsmith@company.com - Multiple MFA Denials\"\n\n**Decision: PRESERVE**\n\n### CLEAN UP the title if:\n- It contains system-generated UUIDs or GUIDs in the middle of readable text\n- It has excessively long auto-generated suffixes (timestamps, message IDs)\n- It has pipe-separated technical data making it hard to read\n- It has email signatures or disclaimers appended\n- The core security information is buried in system formatting\n\n**When cleaning titles:**\n- Format: `[Alert Type] - [Affected Resource] - [Brief Context]`\n- Keep the core security event information\n- Remove UUIDs, long message IDs, timestamps from the middle or end\n- **CRITICAL: If title starts with `[Phish Alert]` or `[PHISH ALERT]`, you MUST preserve that tag at the beginning**\n- Keep user emails, device names, and security tool names\n- Keep alert type and context\n\n**Examples of titles to CLEAN:**\n- Before: `Phishing:d92e9896-461e-484d-e07d-08de2785ae1a|noreply@tm.openai.com|(Suspicious email) 11/19/2025 4:19:38 PM`\n- After: `Phishing Alert - noreply@tm.openai.com - Suspicious Email Detected`\n\n- Before: `[Phish Alert] UUID-12345|user@company.com|credential request|(Suspicious) timestamp`\n- After: `[Phish Alert] Suspicious Email - user@company.com - Credential Request`\n\n**Decision: UPDATE**\n\n### Output Format for Title Decision:\n\n**If preserving:**\n```\n**Title Decision**: PRESERVE\n\n**Title**: [Output the original title exactly as received]\n```\n\n**If updating:**\n```\n**Title Decision**: UPDATE\n\n**Title**: [Your cleaned title here]\n```\n\n---\n\n## 📋 STEP 4: Generate Internal Triage Note\n\n**Create a comprehensive triage note for the security analyst. This note will be added to the internal notes section and will NOT be visible to the client.**\n\n**Your triage note should include:**\n\n### Security Event Summary\nProvide a brief 2-3 sentence overview of:\n- What security event occurred\n- Type of security event (phishing, malware, intrusion attempt, policy violation, authentication anomaly, etc.)\n- Immediate context\n\n### Threat Assessment\nEvaluate and explain:\n- Severity based on the alert details\n- Potential impact if not addressed\n- Indicators of compromise (IOCs) present\n- Attack techniques or methodologies identified\n- Confidence level of the threat\n\n### Key Details to Investigate\nList critical items the analyst should examine:\n- IP addresses, domains, or URLs to analyze\n- Email addresses or user accounts involved\n- Affected devices, systems, or hostnames\n- Timeline of suspicious activity\n- Authentication failures, unusual access patterns, or anomalies\n- File hashes, process names, or registry keys\n- Security tool detections or rule triggers\n\n### Recommended Next Steps\nProvide actionable guidance:\n1. Immediate actions the analyst should take\n2. What to verify or validate\n3. Whether escalation is needed\n4. Containment actions to consider\n5. Investigation paths to pursue\n6. Forensic data to preserve\n\n### Pattern Recognition (if applicable)\nNote any relevant context:\n- Similar recent incidents or related alerts\n- Known campaign or threat actor patterns\n- Emerging threat trends\n- Historical context for this user/system/company\n\n### Triage Note Format\n\nUse this exact structure:\n\n```\n=== SOC TRIAGE ANALYSIS ===\n\nSECURITY EVENT:\n[2-3 sentence summary of what happened]\n\nTHREAT ASSESSMENT:\nSeverity: [Critical/High/Medium based on analysis]\nImpact: [Potential consequences]\nIOCs Present: [Key indicators]\nAttack Method: [Technique or methodology if identifiable]\n\nKEY DETAILS TO INVESTIGATE:\n- IP/Domain/URL: [list critical network indicators]\n- User/Account: [affected identities]\n- Device/System: [affected resources]\n- Timeline: [sequence of events with timestamps]\n- Auth/Access: [authentication or access anomalies]\n- Detection: [security tool findings]\n\nRECOMMENDED NEXT STEPS:\n1. [Immediate action item]\n2. [Verification or validation task]\n3. [Investigation path]\n4. [Containment consideration]\n5. [Escalation or notification if needed]\n\nPATTERN RECOGNITION:\n[Note any related incidents, known campaigns, or historical context]\n[If no patterns identified, state \"No related patterns identified\"]\n\n=== END TRIAGE ===\n```\n\n**CRITICAL REMINDERS:**\n- Base your analysis ONLY on the information in the ticket description\n- Do NOT make assumptions about threat actors or attribution without evidence\n- Do NOT modify or reformat the original ticket description\n- This triage note is for internal analyst use only\n- Focus on actionable intelligence and investigation guidance\n- Preserve all technical accuracy from the original alert\n\n---\n\n## 🎯 Queue Assignment\n\n**Always output:** `\"queueID\": 29682969`\n\nAll SOC alerts route to Level 2 Support - Security team.\n\n---\n\n## 📤 Final Output Format (COPY EXACTLY)\n\n**Example with PRESERVE decision:**\n```\nTicket ID: 636138\n\n### SOC Alert Processing\n\n**Classification Validation:**\n- ticketType: CORRECTED from Service Request (1) to Incident (2)\n- priority: Validated as High (6) - Appropriate for threat level\n\n**Field Preservation:**\n✅ issueType: Preserved as null\n✅ subIssueType: Preserved as null\n✅ ticketCategory: 161 (Security Operations Center)\n✅ contactID: Preserved as null\n✅ Description: Preserved as-is (no changes)\n\n**Title Decision**: PRESERVE\n\n**Title**: [Phish Alert] Reported Email - john.smith@company.com\n\n**Queue Assignment**: 29682969 (Level 2 Support - Security)\n\n**Internal Triage Note**:\n```\n=== SOC TRIAGE ANALYSIS ===\n\nSECURITY EVENT:\nA user-reported phishing email was detected targeting user@company.com with credential harvesting links and SPF authentication failure, indicating potential email spoofing and social engineering attack.\n\nTHREAT ASSESSMENT:\nSeverity: High\nImpact: Potential credential compromise, unauthorized access to user account and company resources\nIOCs Present: Suspicious sender domain, SPF failure, credential harvesting URL, spoofed sender identity\nAttack Method: Phishing via email with social engineering (urgency tactics) and malicious links\n\nKEY DETAILS TO INVESTIGATE:\n- Email: Sender address, message-ID, complete headers (SPF/DKIM/DMARC results)\n- URL: Credential harvesting link destination, hosting provider, registration date\n- User/Account: user@company.com - check for any credential use after email receipt\n- Timeline: Email received 12:48 PM, user reported 1:15 PM (27 min exposure window)\n- Auth/Access: Monitor for unusual login attempts to this user's account\n- Detection: User-reported + Mimecast SPF failure flag\n\nRECOMMENDED NEXT STEPS:\n1. Block sender domain and malicious URL at email gateway immediately\n2. Verify user did NOT click link or enter credentials - reset password if uncertain\n3. Review email logs for other recipients within company who may have received same email\n4. Check threat intelligence feeds for known campaign associated with this sender/URL\n5. Add IOCs to security monitoring for detection of similar attempts\n\nPATTERN RECOGNITION:\nCheck for similar phishing attempts in past 30 days targeting employees with urgent credential requests. This appears to be a targeted spear-phishing attempt rather than mass campaign.\n\n=== END TRIAGE ===\n```\n\n### FieldIDs Output\n```json\n{\n \"ticketType\": 2,\n \"priority\": 6,\n \"ticketCategory\": 161,\n \"issueType\": null,\n \"subIssueType\": null,\n \"queueID\": 29682969\n}\n```\n```\n\n**Example with UPDATE decision:**\n```\nTicket ID: 644308\n\n### SOC Alert Processing\n\n**Classification Validation:**\n- ticketType: CORRECTED from Service Request (1) to Incident (2)\n- priority: Validated as High (6) - Appropriate for threat level\n\n**Field Preservation:**\n✅ issueType: Preserved as null\n✅ subIssueType: Preserved as null\n✅ ticketCategory: 161 (Security Operations Center)\n✅ Description: Preserved as-is (no changes)\n\n**Title Decision**: UPDATE\n\n**Title**: Phishing Alert - noreply@tm.openai.com - Suspicious Organization Invitation\n\n**Queue Assignment**: 29682969 (Level 2 Support - Security)\n\n**Internal Triage Note**:\n```\n=== SOC TRIAGE ANALYSIS ===\n\nSECURITY EVENT:\nA suspicious email purportedly from noreply@tm.openai.com was detected with SPF softfail, DKIM fail, and DMARC fail results, suggesting email spoofing and possible phishing or impersonation attempt.\n\nTHREAT ASSESSMENT:\nSeverity: High\nImpact: If recipients trust and interact, potential exposure to phishing, credential compromise, or fraud\nIOCs Present: Sending IP 170.10.128.131 with SPF softfail, DKIM failure on tm.openai.com domain, mismatched headers\nAttack Method: Email spoofing with possible phishing lure messages exploiting user trust\n\nKEY DETAILS TO INVESTIGATE:\n- IP Address: 170.10.128.131 (source of SPF softfail)\n- Domains: tm.openai.com, em7877.tm.openai.com\n- Email Addresses: noreply@tm.openai.com, support@openai.com (reply-to)\n- Users: Primary recipient Christine Gove\n- Timeline: Email received 19 Nov 2025 16:06 UTC\n- Authentication: SPF softfail, DKIM fail, DMARC fail\n\nRECOMMENDED NEXT STEPS:\n1. Block or quarantine emails from suspicious sources/IPs at email gateway immediately\n2. Verify if any recipients clicked or interacted with links or attachments\n3. Audit mail logs for additional recipients or similar spoofed messages\n4. Collect and analyze full message headers and MIME parts for forensic analysis\n5. Update email security rules to detect and prevent similar spoofing attempts\n6. Escalate to incident response if user impact or compromise is confirmed\n\nPATTERN RECOGNITION:\nNo direct evidence of links to known campaigns detected; however, spoofed openai.com related domains and softfail SPF signals are common in phishing attempts impersonating trusted brands.\n\n=== END TRIAGE ===\n```\n\n### FieldIDs Output\n```json\n{\n \"ticketType\": 2,\n \"priority\": 6,\n \"ticketCategory\": 161,\n \"issueType\": null,\n \"subIssueType\": null,\n \"queueID\": 29682969\n}\n```\n```\n\n**The above are EXAMPLES showing correct format. Your actual content will differ but the format structure must be IDENTICAL.**\n\n---\n\n## ⚠️ Common Mistakes to Avoid\n\n**DON'T do these:**\n- ❌ Wrap entire output in code fence: ` ``` Ticket ID... ``` `\n- ❌ Modify the ticket description in any way\n- ❌ Put FieldIDs JSON inside the triage note code fence\n- ❌ Forget blank line between triage note closing and FieldIDs section\n- ❌ Forget `### FieldIDs Output` header\n- ❌ Use wrong JSON fence: ` ```{` instead of ` ```json`\n- ❌ Output string IDs: `\"ticketType\": \"2\"` instead of `\"ticketType\": 2`\n- ❌ Forget ticket ID at top\n- ❌ Use double colons: `**Title Decision**::`\n- ❌ Forget to output the **Title** line (always required)\n- ❌ Forget to preserve [Phish Alert] tags when they exist in original title\n\n**DO these:**\n- ✅ Start directly with \"Ticket ID:\" (no outer code fence)\n- ✅ Title Decision is exactly \"PRESERVE\" or \"UPDATE\"\n- ✅ Always include **Title** line with the actual title (whether preserved or updated)\n- ✅ Description is always marked as preserved\n- ✅ Triage note closes with ``` on its own line\n- ✅ Blank line after triage note closing\n- ✅ \"### FieldIDs Output\" as separate section header\n- ✅ FieldIDs JSON in separate ```json code fence\n- ✅ All IDs as numbers not strings\n- ✅ Ticket ID as first line\n- ✅ Preserve [Phish Alert] tags when they exist in original title\n- ✅ Keep all original security alert data in description intact\n\n**CRITICAL: Use `null` (not `\"\"` or empty string) for null/empty values in JSON**\n\n---\n\n**You will now receive a ticket to process. Follow all steps above and output in the exact format specified.**" } }, "type": "@n8n/n8n-nodes-langchain.agent", "typeVersion": 2.2, "position": [ 2016, 80 ], "id": "0c4c5884-7b12-46e9-b524-074eb7b33f72", "name": "AI Agent3", "alwaysOutputData": true, "executeOnce": false }, { "parameters": { "model": { "__rl": true, "value": "gpt-5.2", "mode": "list", "cachedResultName": "gpt-5.2" }, "options": { "timeout": 180000 } }, "type": "@n8n/n8n-nodes-langchain.lmChatOpenAi", "typeVersion": 1.2, "position": [ 2096, 304 ], "id": "2b4bc54b-ee44-4147-8209-11e5744066bc", "name": "OpenAI Chat Model3", "credentials": { "openAiApi": { "id": "38HvRPpoNqRs3WND", "name": "OpenAi Dan" } } }, { "parameters": { "resource": "ticket", "operation": "update", "id": "={{ $json.id }}", "fieldsToMap": { "mappingMode": "defineBelow", "value": { "queueID": "={{ $json[\"queueID\"] }}", "title": "={{ $json[\"title\"] }}", "status": "47", "ticketCategory": "161", "ticketType": "={{ $json[\"ticketType\"] }}", "subIssueType": "={{ $json.subIssueType }}", "issueType": "={{ $json.issueType }}" }, "matchingColumns": [], "schema": [ { "id": "assignedResourceID", "displayName": "Assigned resource ID (Reference: Resource | assignedResourceID)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Addigy API", "value": "30861552", "description": "" }, { "name": "Anthony Bonante", "value": "30861472", "description": "" }, { "name": "Autotask Administrator", "value": "4", "description": "" }, { "name": "Brad Fortney", "value": "30861483", "description": "" }, { "name": "Casey Roush", "value": "30861478", "description": "" }, { "name": "chat test", "value": "30861548", "description": "" }, { "name": "Collin Imler", "value": "30861443", "description": "" }, { "name": "Connect Booster", "value": "30861526", "description": "" }, { "name": "Cory Houck", "value": "30861463", "description": "" }, { "name": "Crewhu Bot", "value": "30861496", "description": "" }, { "name": "Dan Bucci", "value": "29823085", "description": "" }, { "name": "Darrius Jones", "value": "30861543", "description": "" }, { "name": "Dash Board", "value": "30861460", "description": "" }, { "name": "Datto RMM", "value": "30861455", "description": "" }, { "name": "David Bauer", "value": "30861549", "description": "" }, { "name": "Delmar Insights", "value": "30861534", "description": "" }, { "name": "DeskDirector Integrator", "value": "30861501", "description": "" }, { "name": "Development N8N", "value": "30861571", "description": "" }, { "name": "Evan Life", "value": "30861544", "description": "" }, { "name": "Garrett Reihner", "value": "30861570", "description": "" }, { "name": "Gary Hightower", "value": "30861458", "description": "" }, { "name": "Heather Collins", "value": "30861568", "description": "" }, { "name": "Huntress Labs", "value": "30861538", "description": "" }, { "name": "Jake Hammel", "value": "30861450", "description": "" }, { "name": "James Hubbard", "value": "30861536", "description": "" }, { "name": "James Meier", "value": "30861471", "description": "" }, { "name": "Jeremy Johnston", "value": "29682788", "description": "" }, { "name": "John Stvartak", "value": "30861444", "description": "" }, { "name": "Jordan Goff", "value": "30861491", "description": "" }, { "name": "Joshua Mitchell", "value": "30861540", "description": "" }, { "name": "Kayla Lantz", "value": "30861507", "description": "" }, { "name": "Lauren Baczuk", "value": "30861505", "description": "" }, { "name": "Lifecycle Insights", "value": "30861551", "description": "" }, { "name": "Lorentz Hinrichsen", "value": "29683311", "description": "" }, { "name": "Miguel Vasquez", "value": "30861541", "description": "" }, { "name": "MissionControl API", "value": "30861530", "description": "" }, { "name": "n8n api", "value": "30861569", "description": "" }, { "name": "passportal sync", "value": "30861557", "description": "" }, { "name": "Pax8 API", "value": "30861528", "description": "" }, { "name": "Quickbooks Online", "value": "30861532", "description": "" }, { "name": "QuoteWerks Sales", "value": "30861531", "description": "" }, { "name": "Rewst Automation", "value": "30861573", "description": "" }, { "name": "RMM Tool", "value": "29764294", "description": "" }, { "name": "Ryan Day", "value": "30861510", "description": "" }, { "name": "Salesbuildr API", "value": "30861574", "description": "" }, { "name": "Sean Glenn", "value": "30861545", "description": "" }, { "name": "SecureBreachNow API", "value": "30861554", "description": "" }, { "name": "Steve Cianflone", "value": "30861476", "description": "" }, { "name": "TimeZest API", "value": "30861529", "description": "" }, { "name": "Tom Carlin", "value": "30861456", "description": "" }, { "name": "Tony Feerst", "value": "29775118", "description": "" }, { "name": "Warranty Master", "value": "30861475", "description": "" }, { "name": "Wulf Automation", "value": "30861533", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "assignedResourceRoleID", "displayName": "Assigned resource role ID (Integer | assignedResourceRoleID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "billingCodeID", "displayName": "Billing code ID (Reference: BillingCode | billingCodeID)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Administration Dept Meeting (29792118)", "value": "29792118", "description": "" }, { "name": "Bench Work (29682870)", "value": "29682870", "description": "" }, { "name": "Block Hours (29720332)", "value": "29720332", "description": "" }, { "name": "Business Development (29792079)", "value": "29792079", "description": "" }, { "name": "Change Orders (5)", "value": "5", "description": "" }, { "name": "Client Onboarding (29792114)", "value": "29792114", "description": "" }, { "name": "Client Relations and Sales (29792101)", "value": "29792101", "description": "" }, { "name": "Client Success (29682860)", "value": "29682860", "description": "" }, { "name": "Client Success Dept Meeting (29792121)", "value": "29792121", "description": "" }, { "name": "Client Success Mgmt (Admin) (29792122)", "value": "29792122", "description": "" }, { "name": "Client Supplies (29792125)", "value": "29792125", "description": "" }, { "name": "Co-Managed IT Resource (29792072)", "value": "29792072", "description": "" }, { "name": "Company Morning Huddle (29792098)", "value": "29792098", "description": "" }, { "name": "Cyber Security (29792084)", "value": "29792084", "description": "" }, { "name": "Data Center Cloud (29792087)", "value": "29792087", "description": "" }, { "name": "Datto Cloud (29792096)", "value": "29792096", "description": "" }, { "name": "Discount (-1)", "value": "-1", "description": "" }, { "name": "Discount Non-Taxable (-2)", "value": "-2", "description": "" }, { "name": "Domain Name (29694963)", "value": "29694963", "description": "" }, { "name": "Entertainment Expense (3)", "value": "3", "description": "" }, { "name": "Escalation (29792117)", "value": "29792117", "description": "" }, { "name": "Financial and Accounting (Admin) (29792103)", "value": "29792103", "description": "" }, { "name": "HaaS (29792106)", "value": "29792106", "description": "" }, { "name": "Hardware - Infrastructure (29792094)", "value": "29792094", "description": "" }, { "name": "Hardware (29682871)", "value": "29682871", "description": "" }, { "name": "Hardware (29792065)", "value": "29792065", "description": "" }, { "name": "Holiday (91208)", "value": "91208", "description": "" }, { "name": "Hourly Payroll (29792113)", "value": "29792113", "description": "" }, { "name": "Human Resources (Admin) (29682781)", "value": "29682781", "description": "" }, { "name": "Innovation and Technology (29792112)", "value": "29792112", "description": "" }, { "name": "Inventory Management (29792105)", "value": "29792105", "description": "" }, { "name": "Labor (29682918)", "value": "29682918", "description": "" }, { "name": "Labor (29702246)", "value": "29702246", "description": "" }, { "name": "Labor (29792064)", "value": "29792064", "description": "" }, { "name": "Legal and Compliance (Admin) (29792110)", "value": "29792110", "description": "" }, { "name": "Managed IT & Backup (29792083)", "value": "29792083", "description": "" }, { "name": "Marketing (Admin) (29792100)", "value": "29792100", "description": "" }, { "name": "Marketing & Branding (29792109)", "value": "29792109", "description": "" }, { "name": "Mileage (2)", "value": "2", "description": "" }, { "name": "Milestone (29682913)", "value": "29682913", "description": "" }, { "name": "Miscellaneous (29682783)", "value": "29682783", "description": "" }, { "name": "Monitoring Services (29683277)", "value": "29683277", "description": "" }, { "name": "New Business Development (Admin) (29792099)", "value": "29792099", "description": "" }, { "name": "Nextiva Services (29792068)", "value": "29792068", "description": "" }, { "name": "NOC Support (29792060)", "value": "29792060", "description": "" }, { "name": "Non-Taxable Products (29682839)", "value": "29682839", "description": "" }, { "name": "O365 Cloud (29792085)", "value": "29792085", "description": "" }, { "name": "O365 Support (29792082)", "value": "29792082", "description": "" }, { "name": "Office Administration (29682808)", "value": "29682808", "description": "" }, { "name": "Office Administration (29792102)", "value": "29792102", "description": "" }, { "name": "On-site Support (29780565)", "value": "29780565", "description": "" }, { "name": "Operations Management (29792077)", "value": "29792077", "description": "" }, { "name": "Out of Scope (29792071)", "value": "29792071", "description": "" }, { "name": "Parking (29765131)", "value": "29765131", "description": "" }, { "name": "Peer Group(s) (29792115)", "value": "29792115", "description": "" }, { "name": "Personal Development and Leadership (29792111)", "value": "29792111", "description": "" }, { "name": "Personal Time (91209)", "value": "91209", "description": "" }, { "name": "Post Sale (29792075)", "value": "29792075", "description": "" }, { "name": "Pro Services Dept Meeting (29792123)", "value": "29792123", "description": "" }, { "name": "Pro Services Mgmt (Admin) (29792124)", "value": "29792124", "description": "" }, { "name": "Procurement & Fulfillment (Admin) (29792104)", "value": "29792104", "description": "" }, { "name": "Professional Service - PC Setup (29792130)", "value": "29792130", "description": "" }, { "name": "Project Labor (29792088)", "value": "29792088", "description": "" }, { "name": "Projects (29682915)", "value": "29682915", "description": "" }, { "name": "Quote Manager Temp (29792107)", "value": "29792107", "description": "" }, { "name": "Recurring Services (29682912)", "value": "29682912", "description": "" }, { "name": "Reimbursed Expense (29792093)", "value": "29792093", "description": "" }, { "name": "Remote Support (29780571)", "value": "29780571", "description": "" }, { "name": "Retainer Purchase (29720333)", "value": "29720333", "description": "" }, { "name": "RMA (29792074)", "value": "29792074", "description": "" }, { "name": "Sales (29792131)", "value": "29792131", "description": "" }, { "name": "Service Delivery Dept Meeting (29792119)", "value": "29792119", "description": "" }, { "name": "Service Delivery Mgmt (Admin) (29792120)", "value": "29792120", "description": "" }, { "name": "Shipping & Handling (29739200)", "value": "29739200", "description": "" }, { "name": "Sick Time (91207)", "value": "91207", "description": "" }, { "name": "SOC (Admin) (29792127)", "value": "29792127", "description": "" }, { "name": "SOC Support (29792081)", "value": "29792081", "description": "" }, { "name": "Software (29682872)", "value": "29682872", "description": "" }, { "name": "Software (29792066)", "value": "29792066", "description": "" }, { "name": "Software Licenses (29684861)", "value": "29684861", "description": "" }, { "name": "Strategic Planning and Vision (29792108)", "value": "29792108", "description": "" }, { "name": "SubContractor (29792092)", "value": "29792092", "description": "" }, { "name": "Subscription (29682919)", "value": "29682919", "description": "" }, { "name": "System Build & Config (29792129)", "value": "29792129", "description": "" }, { "name": "T&M Labor (29792089)", "value": "29792089", "description": "" }, { "name": "Tasks (29682916)", "value": "29682916", "description": "" }, { "name": "Taxable Products (29682840)", "value": "29682840", "description": "" }, { "name": "Taxes from Autotask (29682914)", "value": "29682914", "description": "" }, { "name": "Ticket Purchase (29720334)", "value": "29720334", "description": "" }, { "name": "Ticket Triage (29792116)", "value": "29792116", "description": "" }, { "name": "Tickets (29682917)", "value": "29682917", "description": "" }, { "name": "Training (29792126)", "value": "29792126", "description": "" }, { "name": "Travel Charge (29682782)", "value": "29682782", "description": "" }, { "name": "Travel Time (27192)", "value": "27192", "description": "" }, { "name": "Travel Time (29792067)", "value": "29792067", "description": "" }, { "name": "Vacation (91206)", "value": "91206", "description": "" }, { "name": "VAR Cloud Tax Exempt (29792128)", "value": "29792128", "description": "" }, { "name": "VAR Cloud Taxable (29792086)", "value": "29792086", "description": "" }, { "name": "Web Hosting (29792073)", "value": "29792073", "description": "" }, { "name": "Workstation (29695008)", "value": "29695008", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "changeApprovalBoard", "displayName": "Change approval board (Picklist | changeApprovalBoard)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Software Request CAB", "value": "3", "description": "" }, { "name": "Wulf CAB", "value": "1", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "changeApprovalStatus", "displayName": "Change approval status (Picklist | changeApprovalStatus)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Approved", "value": "5", "description": "" }, { "name": "Assigned", "value": "2", "description": "" }, { "name": "Not Assigned", "value": "1", "description": "" }, { "name": "Partially Approved", "value": "4", "description": "" }, { "name": "Rejected", "value": "6", "description": "" }, { "name": "Requested", "value": "3", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "changeApprovalType", "displayName": "Change approval type (Picklist | changeApprovalType)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "All approvers must approve", "value": "1", "description": "" }, { "name": "One approver must approve", "value": "2", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "changeInfoField1", "displayName": "Change info field1 (String | changeInfoField1)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "changeInfoField2", "displayName": "Change info field2 (String | changeInfoField2)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "changeInfoField3", "displayName": "Change info field3 (String | changeInfoField3)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "changeInfoField4", "displayName": "Change info field4 (String | changeInfoField4)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "changeInfoField5", "displayName": "Change info field5 (String | changeInfoField5)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "companyID", "displayName": "Company ID (Integer | companyID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "companyLocationID", "displayName": "Company location ID (Integer | companyLocationID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "configurationItemID", "displayName": "Configuration item ID (Integer | configurationItemID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "contactID", "displayName": "Contact ID (Integer | contactID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "contractID", "displayName": "Contract ID (Integer | contractID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "contractServiceBundleID", "displayName": "Contract service bundle ID (Long | contractServiceBundleID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "contractServiceID", "displayName": "Contract service ID (Long | contractServiceID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "createdByContactID", "displayName": "Created by contact ID (Integer | createdByContactID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "description", "displayName": "Description (String | description)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "dueDateTime", "displayName": "Due date time (Datetime | dueDateTime)", "type": "dateTime", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "estimatedHours", "displayName": "Estimated hours (Decimal | estimatedHours)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "externalID", "displayName": "External ID (String | externalID)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "issueType", "displayName": "Issue type (Picklist | issueType)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "24-Hour Emergency Support", "value": "36", "description": "" }, { "name": "Active Directory & Accounts", "value": "76", "description": "" }, { "name": "Backups", "value": "38", "description": "" }, { "name": "Blumira Monitoring", "value": "83", "description": "" }, { "name": "Centralized Services", "value": "22", "description": "" }, { "name": "Client Success", "value": "28", "description": "" }, { "name": "Collaboration (Video, Voice & Chat)", "value": "42", "description": "" }, { "name": "Datto RMM Monitoring", "value": "57", "description": "" }, { "name": "Decommission", "value": "75", "description": "" }, { "name": "Deployment", "value": "45", "description": "" }, { "name": "DUO Monitoring", "value": "77", "description": "" }, { "name": "Email", "value": "34", "description": "" }, { "name": "Epicor", "value": "66", "description": "" }, { "name": "Hardware", "value": "31", "description": "" }, { "name": "Home Support", "value": "65", "description": "" }, { "name": "Human Resources", "value": "55", "description": "" }, { "name": "Huntress Monitoring", "value": "78", "description": "" }, { "name": "M365 Monitoring", "value": "79", "description": "" }, { "name": "MAC", "value": "21", "description": "" }, { "name": "MES", "value": "68", "description": "" }, { "name": "MES AccPac", "value": "72", "description": "" }, { "name": "MES Data Collection", "value": "71", "description": "" }, { "name": "MES IT Department", "value": "74", "description": "" }, { "name": "MES PowerBI", "value": "73", "description": "" }, { "name": "MES Preactor", "value": "70", "description": "" }, { "name": "MES Server", "value": "69", "description": "" }, { "name": "Networking", "value": "25", "description": "" }, { "name": "Office Administration", "value": "43", "description": "" }, { "name": "Old Sales", "value": "26", "description": "" }, { "name": "Peripheral Connectivity", "value": "51", "description": "" }, { "name": "Post Sales", "value": "87", "description": "" }, { "name": "Ransomware Monitoring", "value": "85", "description": "" }, { "name": "Reactive", "value": "20", "description": "" }, { "name": "Remote Access", "value": "63", "description": "" }, { "name": "Sales", "value": "86", "description": "" }, { "name": "Security", "value": "59", "description": "" }, { "name": "SentinelOne Monitoring", "value": "80", "description": "" }, { "name": "Server", "value": "30", "description": "" }, { "name": "Software", "value": "46", "description": "" }, { "name": "Sophos Monitoring", "value": "81", "description": "" }, { "name": "Technology Alignment", "value": "84", "description": "" }, { "name": "Thrasher Internal", "value": "67", "description": "" }, { "name": "Vendor Support", "value": "61", "description": "" }, { "name": "Zoom Monitoring", "value": "82", "description": "" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "isVisibleToComanaged", "displayName": "Is visible to comanaged (Boolean | isVisibleToComanaged)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Yes", "value": "true", "description": "True/Yes" }, { "name": "No", "value": "false", "description": "False/No" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "monitorID", "displayName": "Monitor ID (Long | monitorID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "monitorTypeID", "displayName": "Monitor type ID (Picklist | monitorTypeID)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "AntivirusMonitor", "value": "23", "description": "" }, { "name": "BackupMonitor", "value": "13", "description": "" }, { "name": "ComponentMonitor", "value": "4", "description": "" }, { "name": "CPUMonitor", "value": "2", "description": "" }, { "name": "DiskUsageMonitor", "value": "10", "description": "" }, { "name": "EventLogMonitor", "value": "7", "description": "" }, { "name": "FileFolderSizeMonitor", "value": "11", "description": "" }, { "name": "HardwareMonitor", "value": "19", "description": "" }, { "name": "MemoryMonitor", "value": "3", "description": "" }, { "name": "NetworkMonitor", "value": "16", "description": "" }, { "name": "NetworkOfflineMonitor", "value": "17", "description": "" }, { "name": "OnlineStatusMonitor", "value": "1", "description": "" }, { "name": "PatchMonitor", "value": "20", "description": "" }, { "name": "PrinterStatusMonitor", "value": "14", "description": "" }, { "name": "ProcessMonitor", "value": "5", "description": "" }, { "name": "RansomwareMonitor", "value": "24", "description": "" }, { "name": "SecurityCenterMonitor", "value": "9", "description": "" }, { "name": "SecurityManagementMonitor", "value": "12", "description": "" }, { "name": "ServiceMonitor", "value": "6", "description": "" }, { "name": "SnmpMonitor", "value": "15", "description": "" }, { "name": "SoftwareMonitor", "value": "8", "description": "" }, { "name": "TemperatureSensorMonitor", "value": "18", "description": "" }, { "name": "ThreatDetection", "value": "25", "description": "" }, { "name": "WindowsPerformanceMonitor", "value": "21", "description": "" }, { "name": "WmiMonitor", "value": "22", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "opportunityID", "displayName": "Opportunity ID (Integer | opportunityID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "organizationalLevelAssociationID", "displayName": "Organizational level association ID (Integer | organizationalLevelAssociationID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "priority", "displayName": "Priority (Picklist | priority)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Critical", "value": "4", "description": "" }, { "name": "Fast Track", "value": "11", "description": "" }, { "name": "High", "value": "6", "description": "" }, { "name": "Installation", "value": "10", "description": "" }, { "name": "Major Service", "value": "9", "description": "" }, { "name": "Medium", "value": "2", "description": "" }, { "name": "Minor Service", "value": "8", "description": "" }, { "name": "Security Event", "value": "7", "description": "" }, { "name": "Standard", "value": "3", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "problemTicketId", "displayName": "Problem ticket id (Integer | problemTicketId)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "projectID", "displayName": "Project ID (Integer | projectID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "purchaseOrderNumber", "displayName": "Purchase order number (String | purchaseOrderNumber)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "queueID", "displayName": "Queue ID (Picklist | queueID)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Client Success", "value": "29749490", "description": "" }, { "name": "Client Triage", "value": "5", "description": "" }, { "name": "Deployment", "value": "29853700", "description": "" }, { "name": "Follow Up", "value": "29853695", "description": "" }, { "name": "Glunt Help Desk", "value": "29853714", "description": "" }, { "name": "IT Operations", "value": "29853701", "description": "" }, { "name": "LEC Network Operations Center", "value": "29853754", "description": "" }, { "name": "LEC Security Operations Center", "value": "29853755", "description": "" }, { "name": "LEC Service Desk", "value": "29853753", "description": "" }, { "name": "Level 1 Support", "value": "29682833", "description": "" }, { "name": "Level 2 Support", "value": "29682969", "description": "" }, { "name": "Level 3 Support", "value": "29703428", "description": "" }, { "name": "Mission Control", "value": "29853699", "description": "" }, { "name": "Monitoring Alert", "value": "8", "description": "" }, { "name": "Operations Triage", "value": "29832283", "description": "" }, { "name": "PER Network Operations Center", "value": "29853751", "description": "" }, { "name": "PER Security Operations Center", "value": "29853752", "description": "" }, { "name": "PER Service Desk", "value": "29853750", "description": "" }, { "name": "Post Sale", "value": "6", "description": "" }, { "name": "Premier Automation Help Desk", "value": "29853706", "description": "" }, { "name": "Project Delivery", "value": "29853698", "description": "" }, { "name": "Purchasing", "value": "29853727", "description": "" }, { "name": "Sales", "value": "29853766", "description": "" }, { "name": "Subcontractor", "value": "29853741", "description": "" }, { "name": "TaskFire", "value": "29780304", "description": "" }, { "name": "TNT Pizza Help Desk", "value": "29853719", "description": "" }, { "name": "Trivium Packaging - Help Desk", "value": "29853697", "description": "" }, { "name": "Trivium Packaging - MES", "value": "29853731", "description": "" }, { "name": "TTG Change Mgmt", "value": "29853740", "description": "" }, { "name": "TTG Finance", "value": "29853723", "description": "" }, { "name": "TTG Help Desk", "value": "29853710", "description": "" }, { "name": "TTG Machines", "value": "29853720", "description": "" }, { "name": "TTG NetOps", "value": "29853721", "description": "" }, { "name": "TTG New User Access", "value": "29853728", "description": "" }, { "name": "TTG Remote", "value": "29853726", "description": "" }, { "name": "TTG Safety", "value": "29853724", "description": "" }, { "name": "TTG Security", "value": "29853738", "description": "" }, { "name": "TTG Term User Access", "value": "29853729", "description": "" }, { "name": "VCF Network Operations", "value": "29853757", "description": "" }, { "name": "VCF Security Operations Center", "value": "29853758", "description": "" }, { "name": "VCF Service Desk", "value": "29853756", "description": "" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "resolution", "displayName": "Resolution (String | resolution)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "rmaStatus", "displayName": "Rma status (Picklist | rmaStatus)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Authorized", "value": "2", "description": "" }, { "name": "Denied", "value": "3", "description": "" }, { "name": "Finished", "value": "9", "description": "" }, { "name": "Finished (Not Returned)", "value": "10", "description": "" }, { "name": "In Progress", "value": "8", "description": "" }, { "name": "On Hold", "value": "5", "description": "" }, { "name": "Open", "value": "4", "description": "" }, { "name": "Requested", "value": "1", "description": "" }, { "name": "Waiting for Customer", "value": "7", "description": "" }, { "name": "Withdrawn", "value": "6", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "rmaType", "displayName": "Rma type (Picklist | rmaType)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Repair", "value": "2", "description": "" }, { "name": "Replace", "value": "3", "description": "" }, { "name": "Return", "value": "1", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "serviceLevelAgreementID", "displayName": "Service level agreement ID (Picklist | serviceLevelAgreementID)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Default", "value": "1", "description": "" }, { "name": "NOC/SOC SLA", "value": "11", "description": "" }, { "name": "Post Sale SLA", "value": "16", "description": "" }, { "name": "Sales SLA", "value": "12", "description": "" }, { "name": "Service Desk - Standard SLA", "value": "9", "description": "" }, { "name": "Thrasher HD SLA", "value": "14", "description": "" }, { "name": "Wulf Response 24x7x365", "value": "10", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "source", "displayName": "Source (Picklist | source)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Autotask Portal", "value": "5", "description": "" }, { "name": "AWS Cloud Watch (email)", "value": "37", "description": "" }, { "name": "Blumira SIEM", "value": "36", "description": "" }, { "name": "Client Portal", "value": "-1", "description": "" }, { "name": "Client Success Team", "value": "30", "description": "" }, { "name": "Datto RMM (API)", "value": "8", "description": "" }, { "name": "Desk Director Portal", "value": "21", "description": "" }, { "name": "DUO (API)", "value": "32", "description": "" }, { "name": "Email", "value": "4", "description": "" }, { "name": "Huntress (email)", "value": "31", "description": "" }, { "name": "In Person/Onsite", "value": "6", "description": "" }, { "name": "Insourced", "value": "-2", "description": "" }, { "name": "Lifecyle", "value": "40", "description": "" }, { "name": "M365 (email)", "value": "33", "description": "" }, { "name": "Other", "value": "1", "description": "" }, { "name": "Phone", "value": "2", "description": "" }, { "name": "Recurring", "value": "22", "description": "" }, { "name": "RMM Tool", "value": "17", "description": "" }, { "name": "RocketCyber Alert", "value": "24", "description": "" }, { "name": "SentinelOne (email)", "value": "34", "description": "" }, { "name": "Service Delivery Team", "value": "38", "description": "" }, { "name": "Service Escalation", "value": "39", "description": "" }, { "name": "Sophos (email)", "value": "35", "description": "" }, { "name": "Text Message", "value": "18", "description": "" }, { "name": "Zoom (email)", "value": "27", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "status", "displayName": "Status (Picklist | status)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Burn-in In Progress", "value": "46", "description": "" }, { "name": "Client Non-Responsive", "value": "37", "description": "" }, { "name": "Complete", "value": "5", "description": "" }, { "name": "Dispatched", "value": "10", "description": "" }, { "name": "End User Note Added", "value": "19", "description": "" }, { "name": "Escalate", "value": "11", "description": "" }, { "name": "Escalate to CSM", "value": "61", "description": "" }, { "name": "Escalate to Customer HD", "value": "62", "description": "" }, { "name": "Escalate to MC", "value": "48", "description": "" }, { "name": "Escalate to Wulf", "value": "57", "description": "" }, { "name": "Huddle Review", "value": "55", "description": "" }, { "name": "In Progress", "value": "8", "description": "" }, { "name": "Internal Note Added", "value": "66", "description": "" }, { "name": "Loading Customer Config", "value": "60", "description": "" }, { "name": "Need to Order/Fulfill", "value": "59", "description": "" }, { "name": "New", "value": "1", "description": "Default value" }, { "name": "On Hold", "value": "25", "description": "" }, { "name": "Outsourced", "value": "69", "description": "" }, { "name": "Pending Next Site Visit", "value": "45", "description": "" }, { "name": "Pre-Pick Order", "value": "58", "description": "" }, { "name": "Quote Delivered", "value": "67", "description": "" }, { "name": "Ready for Customer Config", "value": "68", "description": "" }, { "name": "Ready to Deploy", "value": "15", "description": "" }, { "name": "Reconcile Billing", "value": "51", "description": "" }, { "name": "Reopened", "value": "16", "description": "" }, { "name": "Resolution Plan", "value": "27", "description": "" }, { "name": "Resolved ", "value": "54", "description": "" }, { "name": "Resource Assigned", "value": "14", "description": "" }, { "name": "Resource Requested", "value": "47", "description": "" }, { "name": "Service Call Scheduled", "value": "30", "description": "" }, { "name": "Tracking Shipment", "value": "56", "description": "" }, { "name": "Waiting Approval", "value": "13", "description": "" }, { "name": "Waiting Customer", "value": "7", "description": "" }, { "name": "Waiting Materials", "value": "9", "description": "" }, { "name": "Waiting Procurement", "value": "65", "description": "" }, { "name": "Waiting Project/Ticket", "value": "71", "description": "" }, { "name": "Waiting Quote Acceptance", "value": "70", "description": "" }, { "name": "Waiting Trivium Employee", "value": "64", "description": "" }, { "name": "Waiting Vendor", "value": "12", "description": "" }, { "name": "Waiting Verification", "value": "21", "description": "" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "subIssueType", "displayName": "Sub issue type (Picklist | subIssueType)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "2FA Setup", "value": "860", "description": "" }, { "name": "365 License Add", "value": "840", "description": "" }, { "name": "365 License Remove", "value": "841", "description": "" }, { "name": "365 License Request", "value": "829", "description": "" }, { "name": "401K", "value": "426", "description": "" }, { "name": "Abacus", "value": "539", "description": "" }, { "name": "Abacus", "value": "593", "description": "" }, { "name": "Access Point", "value": "724", "description": "" }, { "name": "Accessories", "value": "237", "description": "" }, { "name": "Account Compromised", "value": "315", "description": "" }, { "name": "Account Lockout", "value": "775", "description": "" }, { "name": "Active Directory", "value": "158", "description": "" }, { "name": "Active Directory", "value": "369", "description": "" }, { "name": "AD account lockout", "value": "795", "description": "" }, { "name": "Add", "value": "418", "description": "" }, { "name": "Add New User", "value": "522", "description": "" }, { "name": "Add User/Line", "value": "413", "description": "" }, { "name": "Adobe Product(s)", "value": "541", "description": "" }, { "name": "Advanced Threat Protection Drop Ale", "value": "786", "description": "" }, { "name": "Agent disabled", "value": "788", "description": "" }, { "name": "AMS 360", "value": "767", "description": "" }, { "name": "Android App Issue", "value": "421", "description": "" }, { "name": "AntiVirus (Not Wulf Managed)", "value": "318", "description": "" }, { "name": "Appgate", "value": "890", "description": "" }, { "name": "Apple Server", "value": "728", "description": "" }, { "name": "Apple Workstation", "value": "727", "description": "" }, { "name": "Apple Workstation", "value": "732", "description": "" }, { "name": "Ardagh Help Desk", "value": "520", "description": "" }, { "name": "Aruba 2530/40 EOL", "value": "885", "description": "" }, { "name": "Audio", "value": "372", "description": "" }, { "name": "Audio", "value": "804", "description": "" }, { "name": "Audio Device Disconnected", "value": "782", "description": "" }, { "name": "Audio Visual", "value": "825", "description": "" }, { "name": "Auto-complete", "value": "569", "description": "" }, { "name": "AutoCAD", "value": "389", "description": "" }, { "name": "AutoCAD", "value": "532", "description": "" }, { "name": "AutoCAD", "value": "581", "description": "" }, { "name": "Autotask PSA", "value": "687", "description": "" }, { "name": "Auvik", "value": "573", "description": "" }, { "name": "Auvik", "value": "696", "description": "" }, { "name": "Auvik Collector Disconnected", "value": "680", "description": "" }, { "name": "Backup: Veeam Agent for Microsoft Windows", "value": "637", "description": "" }, { "name": "Backup: Veeam Backup & Replication", "value": "634", "description": "" }, { "name": "BAQ", "value": "509", "description": "" }, { "name": "BarTender", "value": "712", "description": "" }, { "name": "Battery Replace Indicator", "value": "287", "description": "" }, { "name": "Battery Status", "value": "285", "description": "" }, { "name": "Billing", "value": "309", "description": "" }, { "name": "BitLocker", "value": "764", "description": "" }, { "name": "Bitwarden", "value": "851", "description": "" }, { "name": "Bitwarden setup", "value": "849", "description": "" }, { "name": "Blackberry", "value": "105", "description": "" }, { "name": "Bluebeam", "value": "534", "description": "" }, { "name": "BlueBeam", "value": "579", "description": "" }, { "name": "Blumira", "value": "904", "description": "" }, { "name": "Blumira", "value": "908", "description": "" }, { "name": "Breach", "value": "553", "description": "" }, { "name": "Brightsign", "value": "843", "description": "" }, { "name": "Budget Planning", "value": "930", "description": "" }, { "name": "Bulk Order", "value": "918", "description": "" }, { "name": "Bypass Enabled", "value": "776", "description": "" }, { "name": "Cables & Parts", "value": "361", "description": "" }, { "name": "Calendar Permissions", "value": "571", "description": "" }, { "name": "CallTower", "value": "564", "description": "" }, { "name": "Capacity Expansion", "value": "923", "description": "" }, { "name": "Carrier Websites", "value": "273", "description": "" }, { "name": "Cell Phone", "value": "735", "description": "" }, { "name": "Change management", "value": "450", "description": "" }, { "name": "Change Reqeust", "value": "609", "description": "" }, { "name": "Change Request", "value": "514", "description": "" }, { "name": "Change Request", "value": "599", "description": "" }, { "name": "Change Request", "value": "602", "description": "" }, { "name": "Change Request", "value": "604", "description": "" }, { "name": "Change Request", "value": "605", "description": "" }, { "name": "Change Request", "value": "612", "description": "" }, { "name": "Chirotouch", "value": "293", "description": "" }, { "name": "Chirotouch", "value": "639", "description": "" }, { "name": "Chrome", "value": "542", "description": "" }, { "name": "Circuit", "value": "126", "description": "" }, { "name": "Citrix Share File", "value": "335", "description": "" }, { "name": "Client Audit", "value": "238", "description": "" }, { "name": "Client Budgeting", "value": "879", "description": "" }, { "name": "Client Business Review", "value": "239", "description": "" }, { "name": "Client Consultation Service", "value": "892", "description": "" }, { "name": "Client Offboarding", "value": "304", "description": "" }, { "name": "Client Onboarding", "value": "303", "description": "" }, { "name": "Client Request for Order", "value": "887", "description": "" }, { "name": "Client Request for Quote", "value": "886", "description": "" }, { "name": "Client Service Request", "value": "880", "description": "" }, { "name": "Client Technology Alignment Review", "value": "891", "description": "" }, { "name": "CloudRadial SaaS", "value": "740", "description": "" }, { "name": "Compromised Account", "value": "552", "description": "" }, { "name": "Conditional Access Policy", "value": "859", "description": "" }, { "name": "Conest", "value": "861", "description": "" }, { "name": "Conferencing Equipment Other", "value": "567", "description": "" }, { "name": "ConnectWise Control", "value": "497", "description": "" }, { "name": "Controller (iPad)", "value": "779", "description": "" }, { "name": "Cornerstone", "value": "292", "description": "" }, { "name": "Cornerstone", "value": "640", "description": "" }, { "name": "Counterpoint", "value": "643", "description": "" }, { "name": "CPU Fan Status", "value": "281", "description": "" }, { "name": "CPU Performance", "value": "439", "description": "" }, { "name": "Creo", "value": "834", "description": "" }, { "name": "Customer Specific", "value": "116", "description": "" }, { "name": "DarkWeb ID", "value": "697", "description": "" }, { "name": "Dash", "value": "713", "description": "" }, { "name": "Dashboard", "value": "511", "description": "" }, { "name": "Datto Managed Power", "value": "741", "description": "" }, { "name": "Datto RMM", "value": "688", "description": "" }, { "name": "Datto Work Place", "value": "341", "description": "" }, { "name": "Decommission", "value": "719", "description": "" }, { "name": "Decommission Workstation", "value": "718", "description": "" }, { "name": "Deltek", "value": "535", "description": "" }, { "name": "Deltek", "value": "584", "description": "" }, { "name": "Dentrix", "value": "817", "description": "" }, { "name": "Deployment", "value": "521", "description": "" }, { "name": "Desk Director", "value": "811", "description": "" }, { "name": "Desktop", "value": "248", "description": "" }, { "name": "Desktop - Outlook", "value": "451", "description": "" }, { "name": "Desktop App Issue", "value": "416", "description": "" }, { "name": "Desktop App. (Non Standard)", "value": "225", "description": "" }, { "name": "Desktop App. (Standard)", "value": "160", "description": "" }, { "name": "Desktop App. (Standard)", "value": "226", "description": "" }, { "name": "Desktop/Laptop", "value": "932", "description": "" }, { "name": "DHCP", "value": "162", "description": "" }, { "name": "Disk usage", "value": "438", "description": "" }, { "name": "Display", "value": "745", "description": "" }, { "name": "Distributed File System Replication is Degraded", "value": "675", "description": "" }, { "name": "Distribution Group", "value": "771", "description": "" }, { "name": "DMARC - SPF/DKIM", "value": "714", "description": "" }, { "name": "DNS", "value": "135", "description": "" }, { "name": "DNS", "value": "163", "description": "" }, { "name": "Docking Station", "value": "769", "description": "" }, { "name": "Domain Controller Monitoring", "value": "614", "description": "" }, { "name": "Domain Names", "value": "572", "description": "" }, { "name": "Drive Mappings", "value": "761", "description": "" }, { "name": "DTR (TMM)", "value": "708", "description": "" }, { "name": "DUO Enrollment", "value": "813", "description": "" }, { "name": "DUO Lockout", "value": "758", "description": "" }, { "name": "DUO MFA", "value": "883", "description": "" }, { "name": "Duplicate", "value": "211", "description": "" }, { "name": "DynDNS", "value": "699", "description": "" }, { "name": "Ebonds - Zapier", "value": "869", "description": "" }, { "name": "Ebonds - Gravity Forms", "value": "867", "description": "" }, { "name": "Ebonds - Sharepoint", "value": "868", "description": "" }, { "name": "eDiscovery", "value": "711", "description": "" }, { "name": "Edit User/Line", "value": "415", "description": "" }, { "name": "Egnyte", "value": "766", "description": "" }, { "name": "Elevate Permissions", "value": "765", "description": "" }, { "name": "Email", "value": "118", "description": "" }, { "name": "Email", "value": "122", "description": "" }, { "name": "Email Signatures", "value": "568", "description": "" }, { "name": "Emergency Replacement", "value": "924", "description": "" }, { "name": "Encryption", "value": "113", "description": "" }, { "name": "End of Life Replacement", "value": "925", "description": "" }, { "name": "Enom", "value": "698", "description": "" }, { "name": "Environmental", "value": "472", "description": "" }, { "name": "Epicor", "value": "587", "description": "" }, { "name": "Evaluation", "value": "546", "description": "" }, { "name": "Event logs", "value": "437", "description": "" }, { "name": "Exal MES Related", "value": "259", "description": "" }, { "name": "Exchange", "value": "109", "description": "" }, { "name": "Expansion Opportunity", "value": "927", "description": "" }, { "name": "Failure - Out of Warranty", "value": "544", "description": "" }, { "name": "Failure - Under Warranty", "value": "545", "description": "" }, { "name": "False Alert", "value": "212", "description": "" }, { "name": "Fax", "value": "847", "description": "" }, { "name": "Fax & vFax", "value": "133", "description": "" }, { "name": "Fax & vFax", "value": "503", "description": "" }, { "name": "Fiix", "value": "715", "description": "" }, { "name": "File Permissions", "value": "760", "description": "" }, { "name": "FileZilla", "value": "820", "description": "" }, { "name": "FireFox", "value": "543", "description": "" }, { "name": "Firewall", "value": "124", "description": "" }, { "name": "Firewall", "value": "166", "description": "" }, { "name": "Firewall", "value": "198", "description": "" }, { "name": "Firewall", "value": "244", "description": "" }, { "name": "Firewall", "value": "324", "description": "" }, { "name": "Firewall", "value": "445", "description": "" }, { "name": "Firewall", "value": "721", "description": "" }, { "name": "Firmware", "value": "210", "description": "" }, { "name": "Firmware", "value": "235", "description": "" }, { "name": "Forward Setup", "value": "862", "description": "" }, { "name": "Foundation", "value": "641", "description": "" }, { "name": "FoxPro", "value": "750", "description": "" }, { "name": "Full Disk Encryption", "value": "111", "description": "" }, { "name": "General", "value": "117", "description": "" }, { "name": "GPO", "value": "371", "description": "" }, { "name": "Group Policy", "value": "167", "description": "" }, { "name": "Group Policy", "value": "398", "description": "" }, { "name": "HaaS (Lifecycle)", "value": "856", "description": "" }, { "name": "HaaS (New)", "value": "857", "description": "" }, { "name": "Handset Issue", "value": "422", "description": "" }, { "name": "Hardware", "value": "119", "description": "" }, { "name": "Hardware", "value": "423", "description": "" }, { "name": "Hardware", "value": "556", "description": "" }, { "name": "Hardware Failure", "value": "920", "description": "" }, { "name": "Hardware Issue", "value": "397", "description": "" }, { "name": "Hardware Purchase", "value": "914", "description": "" }, { "name": "Hardware Support", "value": "466", "description": "" }, { "name": "Hardware Upgrade", "value": "921", "description": "" }, { "name": "Health Benefits", "value": "425", "description": "" }, { "name": "Home PC Performance", "value": "530", "description": "" }, { "name": "Huntress", "value": "481", "description": "" }, { "name": "Huntress Detection", "value": "778", "description": "" }, { "name": "Huntress Detection 365", "value": "777", "description": "" }, { "name": "HuntressAgent' isStopped", "value": "866", "description": "" }, { "name": "Hypervisor CPU Module", "value": "668", "description": "" }, { "name": "Hypervisor Hard Drive", "value": "667", "description": "" }, { "name": "Hypervisor Power Supply", "value": "669", "description": "" }, { "name": "Hypervisor RAM Module", "value": "670", "description": "" }, { "name": "HyperVisor: ESXi", "value": "621", "description": "" }, { "name": "HyperVisor: Hyper-V", "value": "774", "description": "" }, { "name": "Image Right", "value": "272", "description": "" }, { "name": "Image Right", "value": "577", "description": "" }, { "name": "Inbound Calling", "value": "409", "description": "" }, { "name": "Incident Response", "value": "909", "description": "" }, { "name": "Incoming", "value": "115", "description": "" }, { "name": "Informational", "value": "874", "description": "" }, { "name": "Internal Meeting", "value": "549", "description": "" }, { "name": "Internet", "value": "45", "description": "" }, { "name": "Internet", "value": "49", "description": "" }, { "name": "Internet", "value": "61", "description": "" }, { "name": "Internet", "value": "80", "description": "" }, { "name": "Internet", "value": "98", "description": "" }, { "name": "Internet", "value": "504", "description": "" }, { "name": "Internet Connection is Lost", "value": "676", "description": "" }, { "name": "Intranet/LAN", "value": "46", "description": "" }, { "name": "Intranet/LAN", "value": "50", "description": "" }, { "name": "Intranet/LAN", "value": "62", "description": "" }, { "name": "Intranet/LAN", "value": "81", "description": "" }, { "name": "Intranet/LAN", "value": "99", "description": "" }, { "name": "Intrusion Prevention", "value": "784", "description": "" }, { "name": "Inventory Management", "value": "528", "description": "" }, { "name": "iPad", "value": "720", "description": "" }, { "name": "iPad", "value": "734", "description": "" }, { "name": "iPhone App Issue", "value": "420", "description": "" }, { "name": "IPSec Tunnel", "value": "783", "description": "" }, { "name": "IQMS", "value": "797", "description": "" }, { "name": "ISP", "value": "462", "description": "" }, { "name": "Issue Receiving", "value": "313", "description": "" }, { "name": "Issue Sending", "value": "312", "description": "" }, { "name": "IT Staff Tools", "value": "704", "description": "" }, { "name": "Kerri Door System", "value": "835", "description": "" }, { "name": "Kill performed", "value": "792", "description": "" }, { "name": "Kofax", "value": "833", "description": "" }, { "name": "Laptop", "value": "561", "description": "" }, { "name": "Large File Sending", "value": "493", "description": "" }, { "name": "Last Pass", "value": "858", "description": "" }, { "name": "Lenovo Warranty Claim", "value": "865", "description": "" }, { "name": "Licensing Change", "value": "353", "description": "" }, { "name": "Lifecycle Refresh", "value": "928", "description": "" }, { "name": "Lighthouse Alert", "value": "794", "description": "" }, { "name": "Limble", "value": "827", "description": "" }, { "name": "Liongard", "value": "701", "description": "" }, { "name": "LOB Support", "value": "463", "description": "" }, { "name": "Local Admin Rights Request", "value": "828", "description": "" }, { "name": "LogMeIn", "value": "498", "description": "" }, { "name": "Low Bandwidth", "value": "781", "description": "" }, { "name": "Low Battery Charge", "value": "894", "description": "" }, { "name": "Low Disk Space", "value": "396", "description": "" }, { "name": "Lumion", "value": "803", "description": "" }, { "name": "Mailbox Delegation", "value": "570", "description": "" }, { "name": "Mailbox Full", "value": "838", "description": "" }, { "name": "Malvertising", "value": "816", "description": "" }, { "name": "Malware", "value": "554", "description": "" }, { "name": "Managed Power", "value": "393", "description": "" }, { "name": "Microsoft 365 Backup", "value": "884", "description": "" }, { "name": "Mimecast", "value": "703", "description": "" }, { "name": "Mimecast - Allow Sender", "value": "707", "description": "" }, { "name": "Mimecast - Block Sender", "value": "832", "description": "" }, { "name": "Mimecast - DKIM", "value": "807", "description": "" }, { "name": "Mimecast - DMARC", "value": "808", "description": "" }, { "name": "Mimecast - Message Tracking", "value": "806", "description": "" }, { "name": "Mimecast - Release Email", "value": "706", "description": "" }, { "name": "Mimecast - SPF", "value": "809", "description": "" }, { "name": "Mimecast - TTP", "value": "845", "description": "" }, { "name": "Mimecast - URL Protection", "value": "812", "description": "" }, { "name": "Mimecast Plugin", "value": "773", "description": "" }, { "name": "Mimecast Portal", "value": "772", "description": "" }, { "name": "Misc Issue", "value": "512", "description": "" }, { "name": "MiSys", "value": "709", "description": "" }, { "name": "Mobile", "value": "452", "description": "" }, { "name": "Mobile App Issue", "value": "417", "description": "" }, { "name": "Mobile Device", "value": "173", "description": "" }, { "name": "Modem", "value": "246", "description": "" }, { "name": "Modification", "value": "311", "description": "" }, { "name": "Modify", "value": "419", "description": "" }, { "name": "Monitor", "value": "327", "description": "" }, { "name": "MS Excel", "value": "842", "description": "" }, { "name": "MS Office", "value": "332", "description": "" }, { "name": "MS OneDrive", "value": "345", "description": "" }, { "name": "MS Powerpoint", "value": "800", "description": "" }, { "name": "MS Project", "value": "836", "description": "" }, { "name": "MS Skype", "value": "562", "description": "" }, { "name": "MS Teams", "value": "566", "description": "" }, { "name": "MS Teams", "value": "798", "description": "" }, { "name": "MS Word", "value": "799", "description": "" }, { "name": "MSP Tool", "value": "407", "description": "" }, { "name": "N/A", "value": "271", "description": "" }, { "name": "N/A", "value": "442", "description": "" }, { "name": "N/A", "value": "448", "description": "" }, { "name": "N/A", "value": "477", "description": "" }, { "name": "N/A", "value": "502", "description": "" }, { "name": "NAS / SAN", "value": "216", "description": "" }, { "name": "NAS /SAN", "value": "227", "description": "" }, { "name": "Network Element Offline", "value": "681", "description": "" }, { "name": "Network: Firewalls - Sophos XG", "value": "622", "description": "" }, { "name": "Network: NAS Devices - Synology", "value": "615", "description": "" }, { "name": "Network: Switches - HP_Aruba", "value": "630", "description": "" }, { "name": "Network: Unifi APs", "value": "903", "description": "" }, { "name": "Network: UPS Devices - APC", "value": "620", "description": "" }, { "name": "Networking", "value": "531", "description": "" }, { "name": "Networking Equipment", "value": "934", "description": "" }, { "name": "New active threat", "value": "790", "description": "" }, { "name": "New MSA", "value": "302", "description": "" }, { "name": "New request", "value": "310", "description": "" }, { "name": "New Security Tool (MSA)", "value": "824", "description": "" }, { "name": "New Software", "value": "822", "description": "" }, { "name": "Newforma", "value": "533", "description": "" }, { "name": "Newforma", "value": "685", "description": "" }, { "name": "Nextiva", "value": "499", "description": "" }, { "name": "Nextiva", "value": "563", "description": "" }, { "name": "Nextiva Specific Issue", "value": "266", "description": "" }, { "name": "Nitro Pro PDF", "value": "588", "description": "" }, { "name": "No Survey", "value": "262", "description": "" }, { "name": "Non-Deliverable", "value": "257", "description": "" }, { "name": "Non-Windows Server", "value": "330", "description": "" }, { "name": "Not Detected", "value": "876", "description": "" }, { "name": "Not Running", "value": "875", "description": "" }, { "name": "Not Up To Date", "value": "877", "description": "" }, { "name": "O365 ADD", "value": "432", "description": "" }, { "name": "O365 Password", "value": "434", "description": "" }, { "name": "O365 REMOVE", "value": "433", "description": "" }, { "name": "O365 SPAM", "value": "431", "description": "" }, { "name": "Office Move", "value": "731", "description": "" }, { "name": "Office Move", "value": "815", "description": "" }, { "name": "Offline", "value": "276", "description": "" }, { "name": "Offline", "value": "284", "description": "" }, { "name": "OpenDNS", "value": "692", "description": "" }, { "name": "Operating System", "value": "557", "description": "" }, { "name": "Operational", "value": "871", "description": "" }, { "name": "Optimization - Server", "value": "218", "description": "" }, { "name": "Other", "value": "232", "description": "" }, { "name": "Other", "value": "247", "description": "" }, { "name": "Other", "value": "251", "description": "" }, { "name": "Other", "value": "255", "description": "" }, { "name": "Other", "value": "258", "description": "" }, { "name": "Other", "value": "265", "description": "" }, { "name": "Other", "value": "275", "description": "" }, { "name": "Other", "value": "300", "description": "" }, { "name": "Other", "value": "317", "description": "" }, { "name": "Other", "value": "329", "description": "" }, { "name": "Other", "value": "357", "description": "" }, { "name": "Other", "value": "364", "description": "" }, { "name": "Other", "value": "370", "description": "" }, { "name": "Other", "value": "373", "description": "" }, { "name": "Other", "value": "385", "description": "" }, { "name": "Other", "value": "386", "description": "" }, { "name": "Other", "value": "399", "description": "" }, { "name": "Other", "value": "400", "description": "" }, { "name": "Other", "value": "401", "description": "" }, { "name": "Other", "value": "402", "description": "" }, { "name": "Other", "value": "403", "description": "" }, { "name": "Other", "value": "404", "description": "" }, { "name": "Other", "value": "412", "description": "" }, { "name": "Other", "value": "424", "description": "" }, { "name": "Other", "value": "429", "description": "" }, { "name": "Other", "value": "435", "description": "" }, { "name": "Other", "value": "467", "description": "" }, { "name": "Other", "value": "479", "description": "" }, { "name": "Other", "value": "496", "description": "" }, { "name": "Other", "value": "508", "description": "" }, { "name": "Other", "value": "730", "description": "" }, { "name": "Other", "value": "762", "description": "" }, { "name": "Other Hardware", "value": "938", "description": "" }, { "name": "Out of Office", "value": "839", "description": "" }, { "name": "Outbound", "value": "114", "description": "" }, { "name": "Outbound Calling", "value": "410", "description": "" }, { "name": "Outbound Issue", "value": "362", "description": "" }, { "name": "Outlook", "value": "110", "description": "" }, { "name": "Outlook / Offline", "value": "108", "description": "" }, { "name": "Output Load Amps", "value": "290", "description": "" }, { "name": "Output Load Watts", "value": "289", "description": "" }, { "name": "Output Status", "value": "288", "description": "" }, { "name": "Pardot", "value": "805", "description": "" }, { "name": "Passportal", "value": "690", "description": "" }, { "name": "Password Reset", "value": "759", "description": "" }, { "name": "Patching", "value": "193", "description": "" }, { "name": "Paycheck", "value": "427", "description": "" }, { "name": "Paycom", "value": "428", "description": "" }, { "name": "PBX", "value": "206", "description": "" }, { "name": "PBX", "value": "500", "description": "" }, { "name": "PepWave | CradlePoint", "value": "263", "description": "" }, { "name": "Performance", "value": "555", "description": "" }, { "name": "Performance - Slow PC", "value": "560", "description": "" }, { "name": "Performance Resolution", "value": "922", "description": "" }, { "name": "Peripheral", "value": "376", "description": "" }, { "name": "Peripheral(s)", "value": "505", "description": "" }, { "name": "Peripherals/Accessories", "value": "936", "description": "" }, { "name": "Phishing", "value": "316", "description": "" }, { "name": "Phishing", "value": "910", "description": "" }, { "name": "Phising:Attatchment", "value": "854", "description": "" }, { "name": "Phising:Credential Harvesting", "value": "853", "description": "" }, { "name": "Phising:Link", "value": "852", "description": "" }, { "name": "Phone", "value": "44", "description": "" }, { "name": "Phone", "value": "48", "description": "" }, { "name": "Phone", "value": "79", "description": "" }, { "name": "Phone", "value": "96", "description": "" }, { "name": "Phone", "value": "103", "description": "" }, { "name": "Phone", "value": "375", "description": "" }, { "name": "Phone", "value": "826", "description": "" }, { "name": "Phone System", "value": "729", "description": "" }, { "name": "PMC", "value": "689", "description": "" }, { "name": "Point of Sale", "value": "87", "description": "" }, { "name": "Point of Sale", "value": "88", "description": "" }, { "name": "Point of Sale", "value": "92", "description": "" }, { "name": "Point of Sale", "value": "93", "description": "" }, { "name": "Point of Sale", "value": "97", "description": "" }, { "name": "POS Pizza", "value": "644", "description": "" }, { "name": "Possible Power Outage", "value": "893", "description": "" }, { "name": "Power", "value": "717", "description": "" }, { "name": "Power Status", "value": "279", "description": "" }, { "name": "PowerBI", "value": "591", "description": "" }, { "name": "Preactor", "value": "296", "description": "" }, { "name": "Primary ISP Down", "value": "260", "description": "" }, { "name": "Printer", "value": "17", "description": "" }, { "name": "Printer", "value": "34", "description": "" }, { "name": "Printer", "value": "64", "description": "" }, { "name": "Printer", "value": "85", "description": "" }, { "name": "Printer", "value": "102", "description": "" }, { "name": "Printer", "value": "127", "description": "" }, { "name": "Printer", "value": "228", "description": "" }, { "name": "Printer", "value": "374", "description": "" }, { "name": "Printing", "value": "377", "description": "" }, { "name": "Processes and services", "value": "440", "description": "" }, { "name": "Production Lines (MES)", "value": "264", "description": "" }, { "name": "PSA", "value": "575", "description": "" }, { "name": "Pulse Secure VPN", "value": "796", "description": "" }, { "name": "QBR Identified Need", "value": "926", "description": "" }, { "name": "Quarantine performed", "value": "787", "description": "" }, { "name": "QuickBooks", "value": "583", "description": "" }, { "name": "Quote", "value": "128", "description": "" }, { "name": "Rackspace", "value": "107", "description": "" }, { "name": "Raid Status", "value": "282", "description": "" }, { "name": "Ransomware", "value": "911", "description": "" }, { "name": "Ransomware: Windows Servers", "value": "747", "description": "" }, { "name": "Ransomware: Windows Workstations", "value": "748", "description": "" }, { "name": "RDP\\RDS Gateway", "value": "495", "description": "" }, { "name": "Receiving Issue", "value": "363", "description": "" }, { "name": "Remote Workforce", "value": "770", "description": "" }, { "name": "Remove User/Line", "value": "414", "description": "" }, { "name": "Renewal", "value": "916", "description": "" }, { "name": "Report", "value": "510", "description": "" }, { "name": "Restore Request", "value": "267", "description": "" }, { "name": "ResWare", "value": "580", "description": "" }, { "name": "Revisto", "value": "864", "description": "" }, { "name": "Revit", "value": "390", "description": "" }, { "name": "Revit", "value": "537", "description": "" }, { "name": "Revit", "value": "582", "description": "" }, { "name": "Risk", "value": "872", "description": "" }, { "name": "Risk Acceptance", "value": "913", "description": "" }, { "name": "Risk Assessment", "value": "863", "description": "" }, { "name": "RMA", "value": "559", "description": "" }, { "name": "RMM", "value": "129", "description": "" }, { "name": "RMM", "value": "219", "description": "" }, { "name": "RMM Agent", "value": "700", "description": "" }, { "name": "RocketCyber", "value": "693", "description": "" }, { "name": "Role Change", "value": "213", "description": "" }, { "name": "Router", "value": "245", "description": "" }, { "name": "Router", "value": "476", "description": "" }, { "name": "Router / Switch", "value": "176", "description": "" }, { "name": "Router / Switch", "value": "229", "description": "" }, { "name": "Safe Sender Validation", "value": "844", "description": "" }, { "name": "Sage", "value": "586", "description": "" }, { "name": "Sage 300", "value": "305", "description": "" }, { "name": "Sage 500", "value": "295", "description": "" }, { "name": "Sagitta", "value": "274", "description": "" }, { "name": "Sagitta", "value": "291", "description": "" }, { "name": "Sagitta", "value": "576", "description": "" }, { "name": "SAN/NAS", "value": "456", "description": "" }, { "name": "SAN/NAS", "value": "474", "description": "" }, { "name": "Scan to Email", "value": "551", "description": "" }, { "name": "Scanning", "value": "550", "description": "" }, { "name": "Secure Messaging", "value": "492", "description": "" }, { "name": "Security Group", "value": "406", "description": "" }, { "name": "Security:Account Locked", "value": "846", "description": "" }, { "name": "Self Test Result", "value": "286", "description": "" }, { "name": "SentinelOne", "value": "763", "description": "" }, { "name": "Server", "value": "11", "description": "" }, { "name": "Server", "value": "28", "description": "" }, { "name": "Server", "value": "60", "description": "" }, { "name": "Server", "value": "78", "description": "" }, { "name": "Server", "value": "95", "description": "" }, { "name": "Server", "value": "123", "description": "" }, { "name": "Server", "value": "230", "description": "" }, { "name": "Server", "value": "444", "description": "" }, { "name": "Server - Authentication Issue", "value": "234", "description": "" }, { "name": "Server/Storage", "value": "933", "description": "" }, { "name": "Service Account", "value": "306", "description": "" }, { "name": "Service Addition", "value": "917", "description": "" }, { "name": "Service Monitor", "value": "905", "description": "" }, { "name": "Shared Mailbox", "value": "814", "description": "" }, { "name": "Sharepoint", "value": "850", "description": "" }, { "name": "Shop Floor Online", "value": "294", "description": "" }, { "name": "Shop Floor Online", "value": "538", "description": "" }, { "name": "Shop Floor Online", "value": "642", "description": "" }, { "name": "Shortell", "value": "565", "description": "" }, { "name": "Simple Shop Floor (SSF)", "value": "710", "description": "" }, { "name": "SketchUp", "value": "585", "description": "" }, { "name": "Slow PC", "value": "256", "description": "" }, { "name": "Smartsheets", "value": "801", "description": "" }, { "name": "SMS iPad App (Hynes)", "value": "768", "description": "" }, { "name": "SoftPro", "value": "589", "description": "" }, { "name": "Software", "value": "16", "description": "" }, { "name": "Software", "value": "33", "description": "" }, { "name": "Software", "value": "83", "description": "" }, { "name": "Software", "value": "94", "description": "" }, { "name": "Software", "value": "101", "description": "" }, { "name": "Software", "value": "408", "description": "" }, { "name": "Software", "value": "447", "description": "" }, { "name": "Software", "value": "558", "description": "" }, { "name": "Software Renewal", "value": "823", "description": "" }, { "name": "Software/License Purchase", "value": "915", "description": "" }, { "name": "Software/Licensing", "value": "935", "description": "" }, { "name": "SolidWorks", "value": "592", "description": "" }, { "name": "Sophos Full Disk Encryption", "value": "695", "description": "" }, { "name": "Sophos MDM", "value": "702", "description": "" }, { "name": "Sophos MDM", "value": "819", "description": "" }, { "name": "Sophos PhishThreat", "value": "691", "description": "" }, { "name": "Sophos PhishThreat", "value": "743", "description": "" }, { "name": "Sophos VPN", "value": "494", "description": "" }, { "name": "Sophos XG EOL", "value": "881", "description": "" }, { "name": "Sophos XG EOL (Currently HaaS)", "value": "888", "description": "" }, { "name": "Sophos XG EOL (Multi-Site)", "value": "889", "description": "" }, { "name": "Sophos:Block Website", "value": "855", "description": "" }, { "name": "Spam", "value": "112", "description": "" }, { "name": "SPAM", "value": "314", "description": "" }, { "name": "Spanning Tree Changed From Forwarding", "value": "674", "description": "" }, { "name": "Spyware/Malware", "value": "106", "description": "" }, { "name": "Stack Switch Member Status Change", "value": "673", "description": "" }, { "name": "Stack Switch Port Status Change", "value": "672", "description": "" }, { "name": "Static IP request", "value": "380", "description": "" }, { "name": "Storage", "value": "326", "description": "" }, { "name": "Storage", "value": "723", "description": "" }, { "name": "Strategic Initiative", "value": "931", "description": "" }, { "name": "Subcontractor", "value": "749", "description": "" }, { "name": "Subscription License", "value": "878", "description": "" }, { "name": "Survey", "value": "261", "description": "" }, { "name": "Suspect", "value": "821", "description": "" }, { "name": "Switch", "value": "125", "description": "" }, { "name": "Switch", "value": "222", "description": "" }, { "name": "Switch", "value": "325", "description": "" }, { "name": "Switch", "value": "455", "description": "" }, { "name": "Switch", "value": "473", "description": "" }, { "name": "Switch", "value": "722", "description": "" }, { "name": "SysPro", "value": "590", "description": "" }, { "name": "System Error", "value": "513", "description": "" }, { "name": "System Error", "value": "516", "description": "" }, { "name": "System Error", "value": "517", "description": "" }, { "name": "System Error", "value": "518", "description": "" }, { "name": "System Error", "value": "519", "description": "" }, { "name": "System Error", "value": "600", "description": "" }, { "name": "System Error", "value": "608", "description": "" }, { "name": "System Fan Status", "value": "283", "description": "" }, { "name": "System Status", "value": "277", "description": "" }, { "name": "System Temperature", "value": "278", "description": "" }, { "name": "Tablet", "value": "736", "description": "" }, { "name": "Teams Room", "value": "810", "description": "" }, { "name": "Technology Upgrade", "value": "929", "description": "" }, { "name": "Threat", "value": "870", "description": "" }, { "name": "Threat Mitigation Alert", "value": "789", "description": "" }, { "name": "TimeZest SaaS", "value": "739", "description": "" }, { "name": "Too Many Sign In Attempts", "value": "785", "description": "" }, { "name": "Upgrade", "value": "547", "description": "" }, { "name": "UPS", "value": "392", "description": "" }, { "name": "UPS", "value": "471", "description": "" }, { "name": "UPS", "value": "830", "description": "" }, { "name": "UPS - Low Battery Charge", "value": "678", "description": "" }, { "name": "UPS - Possible Power Outage", "value": "677", "description": "" }, { "name": "UPS WorldShip", "value": "837", "description": "" }, { "name": "User", "value": "120", "description": "" }, { "name": "User Account", "value": "179", "description": "" }, { "name": "User at Risk Alert", "value": "831", "description": "" }, { "name": "User at risk detected", "value": "793", "description": "" }, { "name": "User enabled agent", "value": "791", "description": "" }, { "name": "User Error", "value": "515", "description": "" }, { "name": "User Error", "value": "601", "description": "" }, { "name": "User Error", "value": "603", "description": "" }, { "name": "User Error", "value": "606", "description": "" }, { "name": "User Error", "value": "607", "description": "" }, { "name": "User Error", "value": "610", "description": "" }, { "name": "User Error", "value": "611", "description": "" }, { "name": "User Termination", "value": "526", "description": "" }, { "name": "Vendor Issue", "value": "381", "description": "" }, { "name": "Verizon Phone System", "value": "848", "description": "" }, { "name": "Video Device Disconnected", "value": "780", "description": "" }, { "name": "Virtualization", "value": "475", "description": "" }, { "name": "Voice Services", "value": "464", "description": "" }, { "name": "Voicemail", "value": "411", "description": "" }, { "name": "VoIP", "value": "436", "description": "" }, { "name": "VPN", "value": "181", "description": "" }, { "name": "VPN", "value": "199", "description": "" }, { "name": "VPN", "value": "449", "description": "" }, { "name": "VPN site to site Issue", "value": "358", "description": "" }, { "name": "Vulnerability Management", "value": "912", "description": "" }, { "name": "Warning", "value": "873", "description": "" }, { "name": "Warranty Claim", "value": "461", "description": "" }, { "name": "Warranty Replacement", "value": "919", "description": "" }, { "name": "Warranty/Service Contract", "value": "937", "description": "" }, { "name": "WattBox", "value": "742", "description": "" }, { "name": "Webroot", "value": "694", "description": "" }, { "name": "Website", "value": "405", "description": "" }, { "name": "WiFi", "value": "104", "description": "" }, { "name": "WiFi", "value": "548", "description": "" }, { "name": "WiFi Access Point", "value": "446", "description": "" }, { "name": "WiFi AP", "value": "356", "description": "" }, { "name": "WindChill", "value": "737", "description": "" }, { "name": "Windows 10 EOL", "value": "882", "description": "" }, { "name": "Windows Server", "value": "613", "description": "" }, { "name": "Windows Server", "value": "726", "description": "" }, { "name": "Windows Server", "value": "733", "description": "" }, { "name": "Windows Server: High CPU", "value": "900", "description": "" }, { "name": "Windows Server: High Memory", "value": "898", "description": "" }, { "name": "Windows Server: Low Disk Space", "value": "899", "description": "" }, { "name": "Windows Server: Offline", "value": "901", "description": "" }, { "name": "Windows Servers", "value": "907", "description": "" }, { "name": "Windows Workstation", "value": "323", "description": "" }, { "name": "Windows Workstation", "value": "616", "description": "" }, { "name": "Windows Workstation", "value": "725", "description": "" }, { "name": "Windows Workstation Life-cycle", "value": "738", "description": "" }, { "name": "Windows Workstation New", "value": "322", "description": "" }, { "name": "Windows Workstation Repurpose", "value": "746", "description": "" }, { "name": "Windows Workstation: Low Disk Space", "value": "902", "description": "" }, { "name": "Windows Workstations", "value": "906", "description": "" }, { "name": "Windows: Role - DHCP Server", "value": "624", "description": "" }, { "name": "Windows: Role - DNS Server", "value": "627", "description": "" }, { "name": "Windows: Role - Domain Controller", "value": "626", "description": "" }, { "name": "Windows: Role - Exchange Server", "value": "625", "description": "" }, { "name": "Windows: Role - Remote Desktop Server", "value": "645", "description": "" }, { "name": "Windows: Role - SQL Server Express", "value": "629", "description": "" }, { "name": "Windows: Role - SQL Server Full", "value": "628", "description": "" }, { "name": "WindowsUpdate Server- Patch Failure", "value": "897", "description": "" }, { "name": "WindowsUpdate Server- Reboot Required", "value": "649", "description": "" }, { "name": "WindowsUpdate Workstation- Patch Failure", "value": "896", "description": "" }, { "name": "WindowsUpdate- Reboot Required", "value": "895", "description": "" }, { "name": "Wireless", "value": "190", "description": "" }, { "name": "Wireless", "value": "231", "description": "" }, { "name": "Wiring", "value": "716", "description": "" }, { "name": "Wolfepak", "value": "818", "description": "" }, { "name": "Workstation", "value": "19", "description": "" }, { "name": "Workstation", "value": "32", "description": "" }, { "name": "Workstation", "value": "63", "description": "" }, { "name": "Workstation", "value": "82", "description": "" }, { "name": "Workstation", "value": "100", "description": "" }, { "name": "Workstation", "value": "121", "description": "" }, { "name": "Workstation", "value": "443", "description": "" }, { "name": "Workstation (Lifecycle)", "value": "224", "description": "" }, { "name": "Workstation (New Device)", "value": "233", "description": "" }, { "name": "Xactimate", "value": "536", "description": "" }, { "name": "Xactimate", "value": "578", "description": "" }, { "name": "Zoom", "value": "686", "description": "" }, { "name": "Zoom Room Update", "value": "705", "description": "" }, { "name": "Zoom Rooms", "value": "298", "description": "" }, { "name": "Zoom Voice", "value": "501", "description": "" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "ticketCategory", "displayName": "Ticket category (Picklist | ticketCategory)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Add New User", "value": "127", "description": "" }, { "name": "Client Success", "value": "149", "description": "" }, { "name": "Customer Offboarding", "value": "123", "description": "" }, { "name": "Customer Onboarding", "value": "121", "description": "" }, { "name": "Decommission Device", "value": "147", "description": "" }, { "name": "Deploy Infrastructure Device", "value": "138", "description": "" }, { "name": "Deploy Misc. Device", "value": "116", "description": "" }, { "name": "Deploy Product Order Only", "value": "154", "description": "" }, { "name": "Deploy Software", "value": "145", "description": "" }, { "name": "Deploy Workstation", "value": "101", "description": "" }, { "name": "IT Operations", "value": "106", "description": "" }, { "name": "Lighthouse Electric Company", "value": "163", "description": "" }, { "name": "Network Operations Center", "value": "2", "description": "" }, { "name": "New Business Development", "value": "152", "description": "" }, { "name": "OLD RFQ", "value": "100", "description": "" }, { "name": "Penn Energy Resources", "value": "162", "description": "" }, { "name": "Post Sale - Order", "value": "136", "description": "" }, { "name": "Premier Automation LLC", "value": "126", "description": "" }, { "name": "Project Delivery (FP)", "value": "113", "description": "" }, { "name": "Project Delivery (Internal)", "value": "137", "description": "" }, { "name": "Project Delivery (TM)", "value": "151", "description": "" }, { "name": "Purchase Order (HaaS)", "value": "156", "description": "" }, { "name": "Purchase Order (Internal)", "value": "165", "description": "" }, { "name": "RMA", "value": "5", "description": "" }, { "name": "RocketCyber Alert", "value": "140", "description": "" }, { "name": "Sales - CSM Generated", "value": "172", "description": "" }, { "name": "Sales - Direct Request", "value": "171", "description": "" }, { "name": "Sales - Lifecycle", "value": "173", "description": "" }, { "name": "Sales - Service Escalation", "value": "170", "description": "" }, { "name": "Security Operations Center", "value": "161", "description": "" }, { "name": "Service Desk", "value": "3", "description": "Default value" }, { "name": "Subcontractor", "value": "150", "description": "" }, { "name": "The Thrasher Group", "value": "131", "description": "" }, { "name": "Ticket Triage", "value": "159", "description": "" }, { "name": "TNT Dynamite Pizza", "value": "133", "description": "" }, { "name": "User Separation", "value": "128", "description": "" }, { "name": "Vendor Support", "value": "155", "description": "" }, { "name": "Vorteq Coil Finishers", "value": "164", "description": "" }, { "name": "Wulf Employee Onboarding", "value": "125", "description": "" }, { "name": "Wulf Employee Separation", "value": "129", "description": "" }, { "name": "WULF ESCALATION DESK", "value": "134", "description": "" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "ticketNumber", "displayName": "Ticket number (String | ticketNumber)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "ticketType", "displayName": "Ticket type (Picklist | ticketType)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Alert", "value": "5", "description": "" }, { "name": "Change Request", "value": "4", "description": "" }, { "name": "Incident", "value": "2", "description": "" }, { "name": "Problem", "value": "3", "description": "" }, { "name": "Service Request", "value": "1", "description": "Default value" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "title", "displayName": "Title (String | title)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": false }, { "id": "Additional Contacts", "displayName": "Additional contacts (1 | Additional Contacts)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "AI Triage Status", "displayName": "Ai triage status (Picklist | AI Triage Status)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "AI Triage Completed", "value": "AI Triage Completed", "description": "" }, { "name": "AI Triage Failed", "value": "AI Triage Failed", "description": "" }, { "name": "AI Triage Request", "value": "AI Triage Request", "description": "" }, { "name": "AI Triage Skipped", "value": "AI Triage Skipped", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Company Ownership", "displayName": "Company ownership (Picklist | Company Ownership)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "AccPac", "value": "AccPac", "description": "" }, { "name": "Lighthouse", "value": "Lighthouse", "description": "" }, { "name": "Preactor", "value": "Preactor", "description": "" }, { "name": "Trivium", "value": "Trivium", "description": "" }, { "name": "Wulf Consulting", "value": "Wulf Consulting", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Company Team Member", "displayName": "Company team member (1 | Company Team Member)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Company Ticket ID#", "displayName": "Company ticket id (1 | Company Ticket ID#)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "CSTicketNumber", "displayName": "Cs ticket number (1 | CSTicketNumber)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Customer Thermometer Temperature", "displayName": "Customer thermometer temperature (1 | Customer Thermometer Temperature)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Equipment Location", "displayName": "Equipment location (1 | Equipment Location)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Exal Division", "displayName": "Exal division (Picklist | Exal Division)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "MES", "value": "MES", "description": "" }, { "name": "Operations", "value": "Operations", "description": "" }, { "name": "South America", "value": "South America", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Issue Type Suggestion", "displayName": "Issue type suggestion (1 | Issue Type Suggestion)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "ITGlue SOP or KB Article", "displayName": "It glue sop or kb article (1 | ITGlue SOP or KB Article)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Job Number", "displayName": "Job number (1 | Job Number)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "New Hire Start Date", "displayName": "New hire start date (1 | New Hire Start Date)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Original Title", "displayName": "Original title (1 | Original Title)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Project Manager", "displayName": "Project manager (Picklist | Project Manager)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Jake Hammel", "value": "Jake Hammel", "description": "" }, { "name": "James Meier", "value": "James Meir", "description": "" }, { "name": "John Stvartak", "value": "John Stvartak", "description": "" }, { "name": "Lorentz Hinrichsen", "value": "Lorentz Hinrichsen", "description": "" }, { "name": "Tom Carlin", "value": "Tom Carlin", "description": "" }, { "name": "Tony Feerst", "value": "Tony Feerst", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Project Technical Lead", "displayName": "Project technical lead (Picklist | Project Technical Lead)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Charles Mathews", "value": "Charles Mathews", "description": "" }, { "name": "James Meier", "value": "James Meier", "description": "" }, { "name": "Lorentz Hinrichsen", "value": "Lorentz Hinrichsen", "description": "" }, { "name": "Steve Cianflone", "value": "Steve Cianflone", "description": "" }, { "name": "Tom Carlin", "value": "Tom Carlin", "description": "" }, { "name": "Tony Feerst", "value": "Tony Feerst", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Purchasing Ticket", "displayName": "Purchasing ticket (1 | Purchasing Ticket)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Quote Number", "displayName": "Quote number (1 | Quote Number)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Review Status", "displayName": "Review status (Picklist | Review Status)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Complete", "value": "Complete", "description": "" }, { "name": "Reconcile Billing", "value": "Reconcile Billing", "description": "" }, { "name": "Waiting CSM Review", "value": "Waiting CSM Review", "description": "" }, { "name": "Waiting Escalation Review", "value": "Waiting Escalation Review", "description": "" }, { "name": "Waiting Huddle Review", "value": "Waiting Huddle Review", "description": "" }, { "name": "Waiting QBR", "value": "Waiting QBR", "description": "" }, { "name": "Waiting TAM Review", "value": "Waiting TAM Review", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Service Delivery Improvement", "displayName": "Service delivery improvement (Picklist | Service Delivery Improvement)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Automation Request", "value": "Automation Request", "description": "" }, { "name": "Checklist Request/Review", "value": "Checklist Request/Review", "description": "" }, { "name": "Documentation Request/Review", "value": "Documentation Request/Review", "description": "" }, { "name": "Interview Ticket", "value": "Interview Ticket", "description": "" }, { "name": "Process Review", "value": "Process Review", "description": "" }, { "name": "QA Review", "value": "QA Review", "description": "" }, { "name": "Ticket Prevention", "value": "Ticket Prevention", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Shipment ETA", "displayName": "Shipment eta (3 | Shipment ETA)", "type": "dateTime", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Shipment Tracking Number(s)", "displayName": "Shipment tracking number s (1 | Shipment Tracking Number(s))", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "SOP Link", "displayName": "Sop link (1 | SOP Link)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Sub Issue Type Suggestion", "displayName": "Sub issue type suggestion (1 | Sub Issue Type Suggestion)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Subcontractor", "displayName": "Subcontractor (Picklist | Subcontractor)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "InTouch Technologies", "value": "InTouch Technologies", "description": "" }, { "name": "MGM Communications", "value": "MGM Communications", "description": "" }, { "name": "Other", "value": "Other", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "TeamsPost", "displayName": "Teams post (Picklist | TeamsPost)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "InventoryManagemet", "value": "Yes", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Termination Date", "displayName": "Termination date (1 | Termination Date)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Work Around In-Place", "displayName": "Work around in place (Picklist | Work Around In-Place)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "No", "value": "No", "description": "" }, { "name": "Unknown", "value": "Unknown", "description": "" }, { "name": "Yes", "value": "Yes", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "WCode", "displayName": "W code (Picklist | WCode)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "CAF", "value": "CAF", "description": "" }, { "name": "Croop", "value": "Croop", "description": "" }, { "name": "EAF", "value": "EAF", "description": "" }, { "name": "LOB01", "value": "LOB01", "description": "" }, { "name": "OS01", "value": "OS01", "description": "" }, { "name": "RO1", "value": "RO1", "description": "" }, { "name": "Security:O365", "value": "Security:O365", "description": "" }, { "name": "Training Request", "value": "TR", "description": "" }, { "name": "UC1", "value": "UC1", "description": "" }, { "name": "User", "value": "User", "description": "" }, { "name": "VendorBug", "value": "VendorBug", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "zOrphanLabtech-LabTechID", "displayName": "Z orphan labtech lab tech ID (1 | zOrphanLabtech-LabTechID)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "zOrphanLabtech-LTAlertID", "displayName": "Z orphan labtech lt alert ID (1 | zOrphanLabtech-LTAlertID)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true } ], "attemptToConvertTypes": false, "convertFieldsToString": false } }, "type": "n8n-nodes-autotask.autotask", "typeVersion": 1, "position": [ 3872, 80 ], "id": "844be4e8-4ab6-4248-b2ae-e404c4cea96c", "name": "Update a ticket2", "credentials": { "autotaskApi": { "id": "5IwoEmby4IbJUtEn", "name": "Autotask account 2" } } }, { "parameters": { "content": "This has been tirned n for all clients except tools only\n" }, "type": "n8n-nodes-base.stickyNote", "position": [ -544, 384 ], "typeVersion": 1, "id": "b8212380-03ad-406c-94fa-cd6d94858848", "name": "Sticky Note4" }, { "parameters": { "workflowId": { "__rl": true, "value": "5e26qK0dNf51GYQW", "mode": "id", "cachedResultUrl": "/workflow/5e26qK0dNf51GYQW" }, "workflowInputs": { "mappingMode": "defineBelow", "value": {}, "matchingColumns": [], "schema": [], "attemptToConvertTypes": false, "convertFieldsToString": true }, "options": {} }, "type": "n8n-nodes-base.executeWorkflow", "typeVersion": 1.3, "position": [ 1504, 672 ], "id": "b1bbdc13-164a-464d-a2b7-70eedf95e297", "name": "Call 'Workstation Diskspace Alert - SD vs Sales Auto Route'" }, { "parameters": { "workflowId": { "__rl": true, "value": "3TVkLHRUo8nlY0TS", "mode": "id", "cachedResultUrl": "/workflow/3TVkLHRUo8nlY0TS" }, "workflowInputs": { "mappingMode": "defineBelow", "value": {}, "matchingColumns": [], "schema": [], "attemptToConvertTypes": false, "convertFieldsToString": true }, "options": {} }, "type": "n8n-nodes-base.executeWorkflow", "typeVersion": 1.3, "position": [ 640, 800 ], "id": "b6667cc1-8c77-4020-a458-40dc2868b21e", "name": "Call 'Wulf Ticket Triage'" }, { "parameters": { "inputSource": "passthrough" }, "type": "n8n-nodes-base.executeWorkflowTrigger", "typeVersion": 1.1, "position": [ 208, 816 ], "id": "1478e934-f174-4f52-8869-27b7873f90ae", "name": "When Executed by Another Workflow" }, { "parameters": { "amount": 30 }, "type": "n8n-nodes-base.wait", "typeVersion": 1.1, "position": [ 2944, 80 ], "id": "bb457f10-d3bf-4343-bfab-1650451632c6", "name": "Wait1", "webhookId": "816c76bc-5e36-4b1d-89e0-603f19298099" }, { "parameters": { "amount": 30 }, "type": "n8n-nodes-base.wait", "typeVersion": 1.1, "position": [ 2368, 960 ], "id": "94efeb6d-3ca4-46b5-8a69-244c57f4ea79", "name": "Wait2", "webhookId": "5ca0cec2-88b0-40e0-be08-a22d17fecb14" }, { "parameters": { "amount": 20 }, "type": "n8n-nodes-base.wait", "typeVersion": 1.1, "position": [ 2800, 320 ], "id": "2409de6a-0ef4-4739-b635-5ab610b78e06", "name": "Wait3", "webhookId": "9562fd8f-0770-4c81-bc91-05e1b7c1cad1" }, { "parameters": { "conditions": { "options": { "caseSensitive": true, "leftValue": "", "typeValidation": "loose", "version": 2 }, "conditions": [ { "id": "778bf685-fbf0-4e63-aecf-f754992702a2", "leftValue": "={{ $json._validationFailed }}", "rightValue": "=true", "operator": { "type": "string", "operation": "equals", "name": "filter.operator.equals" } }, { "id": "55073a8d-dec3-4b4b-9728-0170731e0e72", "leftValue": "={{ $json.attemptNumber }}", "rightValue": 2, "operator": { "type": "number", "operation": "lt" } } ], "combinator": "and" }, "looseTypeValidation": true, "options": {} }, "type": "n8n-nodes-base.if", "typeVersion": 2.2, "position": [ 2000, 368 ], "id": "d2403f93-72f9-4e2a-8e3a-0c7708454b7c", "name": "Validation Check - SD" }, { "parameters": { "conditions": { "options": { "caseSensitive": true, "leftValue": "", "typeValidation": "loose", "version": 2 }, "conditions": [ { "id": "f8e143f8-e827-41e4-9edb-ab4106dec473", "leftValue": "={{ $json._validationFailed }}", "rightValue": "true", "operator": { "type": "string", "operation": "equals", "name": "filter.operator.equals" } }, { "id": "4ea07efa-0364-448d-88ba-8e3046a88a94", "leftValue": "={{ $json.attemptNumber }}", "rightValue": 2, "operator": { "type": "number", "operation": "lt" } } ], "combinator": "and" }, "looseTypeValidation": true, "options": {} }, "type": "n8n-nodes-base.if", "typeVersion": 2.2, "position": [ 2656, 80 ], "id": "21371f4d-b203-4c98-a24b-f9dc1d22122a", "name": "Validation Check - SOC" }, { "parameters": { "conditions": { "options": { "caseSensitive": true, "leftValue": "", "typeValidation": "loose", "version": 2 }, "conditions": [ { "id": "941ad85a-91b1-4fdd-a4f4-1152c30a3331", "leftValue": "={{ $json._validationFailed }}", "rightValue": "true", "operator": { "type": "string", "operation": "equals", "name": "filter.operator.equals" } }, { "id": "d782f8d2-73ac-414b-a14e-9947b06afcb5", "leftValue": "={{ $json.attemptNumber }}", "rightValue": 2, "operator": { "type": "number", "operation": "lt" } } ], "combinator": "and" }, "looseTypeValidation": true, "options": {} }, "type": "n8n-nodes-base.if", "typeVersion": 2.2, "position": [ 2080, 960 ], "id": "4bbb25aa-e768-49d6-97a6-bb8275ec3318", "name": "Validation Check - NOC" }, { "parameters": { "conditions": { "options": { "caseSensitive": true, "leftValue": "", "typeValidation": "loose", "version": 2 }, "conditions": [ { "id": "017f9f85-27da-453d-9d39-be6706330b51", "leftValue": "={{ $json.priority }}", "rightValue": "=11", "operator": { "type": "string", "operation": "equals", "name": "filter.operator.equals" } } ], "combinator": "and" }, "looseTypeValidation": true, "options": {} }, "type": "n8n-nodes-base.if", "typeVersion": 2.2, "position": [ 976, 1168 ], "id": "0df257ff-4bda-4330-9182-fe1f40ab00dc", "name": "If8", "disabled": true }, { "parameters": { "conditions": { "options": { "caseSensitive": true, "leftValue": "", "typeValidation": "loose", "version": 2 }, "conditions": [ { "id": "cf7e37b1-f1d6-4bd3-a7e6-10043e1c6672", "leftValue": "={{ $json.ticketCategory === 161 }}", "rightValue": "true", "operator": { "type": "string", "operation": "equals", "name": "filter.operator.equals" } } ], "combinator": "and" }, "looseTypeValidation": true, "options": {} }, "type": "n8n-nodes-base.if", "typeVersion": 2.2, "position": [ 1792, 80 ], "id": "deb92862-c9fc-4eb2-94be-1f25b7ba3387", "name": "SOC Check" }, { "parameters": { "conditions": { "options": { "caseSensitive": true, "leftValue": "", "typeValidation": "loose", "version": 2 }, "conditions": [ { "id": "30aa8c02-b3dd-428d-8053-b3d0d7ec7bc2", "leftValue": "={{ [3, 159, 127, 128, ].includes($json.ticketCategory) }}", "rightValue": "true", "operator": { "type": "string", "operation": "equals", "name": "filter.operator.equals" } } ], "combinator": "and" }, "looseTypeValidation": true, "options": {} }, "type": "n8n-nodes-base.if", "typeVersion": 2.2, "position": [ 880, 400 ], "id": "97607691-0a9e-41f9-952d-bdc2037387c4", "name": "SD Check" }, { "parameters": { "conditions": { "options": { "caseSensitive": true, "leftValue": "", "typeValidation": "loose", "version": 2 }, "conditions": [ { "id": "b9fb8141-5851-41b1-9f92-0dd3e6f98449", "leftValue": "={{ $json.ticketCategory === 2 }}", "rightValue": "true", "operator": { "type": "string", "operation": "equals", "name": "filter.operator.equals" } } ], "combinator": "and" }, "looseTypeValidation": true, "options": {} }, "type": "n8n-nodes-base.if", "typeVersion": 2.2, "position": [ 864, 672 ], "id": "7746ece3-237f-4736-8b1e-6e7a9ccf9f4b", "name": "NOC Check" }, { "parameters": { "conditions": { "options": { "caseSensitive": true, "leftValue": "", "typeValidation": "loose", "version": 2 }, "conditions": [ { "id": "eeffe86a-86ec-489c-9bba-f699aaec0690", "leftValue": "={{ $json.subIssueType === \"902\" }}", "rightValue": "true", "operator": { "type": "string", "operation": "equals", "name": "filter.operator.equals" } } ], "combinator": "and" }, "looseTypeValidation": true, "options": {} }, "type": "n8n-nodes-base.if", "typeVersion": 2.2, "position": [ 1152, 672 ], "id": "7be1b5f8-0858-44a6-8d2f-9113ef8789c4", "name": "Wulf NOC Triage Check" }, { "parameters": { "conditions": { "options": { "caseSensitive": true, "leftValue": "", "typeValidation": "strict", "version": 2 }, "conditions": [ { "id": "33fd94fd-4e32-4d3c-9027-c9e0ddcc4e80", "leftValue": "={{ $json.entityData.CompanyID }}", "rightValue": "0", "operator": { "type": "string", "operation": "notEquals" } } ], "combinator": "and" }, "options": {} }, "type": "n8n-nodes-base.if", "typeVersion": 2.2, "position": [ 416, 576 ], "id": "74bf2f67-fc6e-4af8-a559-327cdf527ab2", "name": "Wulf Triage Check" }, { "parameters": { "jsCode": "// Transform Autotask Trigger data and apply auto-reclassification\nconst data = $input.first().json;\n\n// Extract ticket data from entityData structure\nconst ticketData = data.entityData || {};\n\n// Helper functions for labels\nfunction getTicketTypeLabel(id) {\n const types = {\n '1': 'Service Request',\n '2': 'Incident', \n '4': 'Change Request',\n '5': 'Alert'\n };\n return types[id] || 'Unknown';\n}\n\nfunction getPriorityLabel(id) {\n const priorities = {\n '2': 'Medium',\n '3': 'Standard',\n '4': 'Critical', \n '6': 'High',\n '8': 'Minor Service',\n '9': 'Major Service',\n '11': 'Fast Track'\n };\n return priorities[id] || 'Unknown';\n}\n\n// Get initial category - DECLARE THIS FIRST BEFORE ANY CONDITIONALS\nlet ticketCategory = Number(ticketData.TicketCategory) || null;\n\nconsole.log('=== AUTO-RECLASSIFICATION CHECK ===');\nconsole.log('Original ticketCategory:', ticketCategory);\n\n// Initialize flags for specialized routing\nlet isZoomUserTicket = false;\nlet zoomDetectionReason = '';\n\n// AUTO-RECLASSIFICATION LOGIC\n// Only reclassify if currently in Service Desk or Ticket Triage categories\nif ([3, 159].includes(ticketCategory)) {\n // CRITICAL: Remove \\r\\n line breaks before searching - they break string matching\n const description = (ticketData.Description || '').replace(/\\r\\n/g, ' ').toLowerCase();\n const title = (ticketData.Title || '').toLowerCase();\n const issueType = ticketData.IssueType || '';\n const subIssueType = ticketData.SubIssueType || '';\n \n // DEBUG: Check what we're actually searching\n console.log('Title for search:', title.substring(0, 50));\n console.log('Description preview:', description.substring(0, 100));\n console.log('Title starts with phishing?:', title.startsWith('phishing:'));\n \n // RULE 1: Datto RMM Monitoring alerts → NOC (category 2)\n if (description.includes('alerts@rmm.datto.com') || \n description.includes('monitor alert') ||\n description.includes('alert was triggered') ||\n description.includes('aem alert') ||\n title.includes('datto') ||\n title.includes('rmm')) {\n \n console.log('→ Detected Datto RMM monitoring alert, reclassifying to NOC (2)');\n ticketCategory = 2;\n }\n \n // RULE 1B: Zoom Monitoring alerts → NOC (category 2)\n // Check for issueType 82 (Zoom Monitoring) OR Zoom alert patterns\n if (ticketCategory !== 2) {\n const isZoomAlert = issueType === '82' || \n issueType === 82 ||\n title.includes('zoom room') ||\n title.includes('zoom monitoring') ||\n description.includes('zoom room') ||\n description.includes('video device disconnected') ||\n description.includes('audio device disconnected') ||\n description.includes('controller (ipad)') ||\n description.includes('low bandwidth');\n \n if (isZoomAlert) {\n console.log('→ Detected Zoom monitoring alert, reclassifying to NOC (2)');\n ticketCategory = 2;\n }\n }\n \n // RULE 2: Security threat alerts → SOC (category 161)\n // CRITICAL: Check for PHISHING FIRST before junk email check\n if (ticketCategory !== 2) {\n \n // ====================================================================\n // STEP 1: Check for phishing/security threats FIRST\n // ====================================================================\n \n // Specific check for phishing reports - ENHANCED\n // Check BOTH title AND description for phishing indicators\n const isPhishingReport = title.startsWith('phishing:') || \n title.includes('[phish alert]') ||\n description.includes('# questionable urls detected') ||\n description.includes('received-spf: fail') ||\n description.includes('dkim=fail') ||\n description.includes('dmarc=fail');\n \n // Check if title explicitly labels this as JUNK (not a threat)\n const isJunkReport = title.startsWith('junk:') || title.startsWith('spam:');\n \n // Check for Blumira security alerts\n const isBlumiraAlert = description.includes('from blumira') ||\n description.includes('blumira@messages.blumira.com') ||\n title.includes('suspect |') ||\n title.includes('critical |') ||\n title.includes('informational |');\n \n // General security keywords (actual threats)\n const securityKeywords = [\n 'phishing', // Single word - catches \"phishing:\" pattern and phishing attempts\n 'phishing email', \n 'phishing attempt',\n 'suspicious email', // Different from \"junk\" - indicates potential threat\n 'malicious email',\n 'malware detected', \n 'ransomware', \n 'threat detected', \n 'suspicious activity',\n 'security breach', \n 'unauthorized access', \n 'compromised account', \n 'attack detected', \n 'exploit',\n 'huntress detection', \n 'duo security alert', \n 'failed login attempt',\n 'brute force attack', \n 'stolen credentials', \n 'compromised credentials',\n 'credential dumping',\n 'keylogging',\n 'keylogger',\n 'ioc', \n 'indicator of compromise', \n 'security alert', \n 'security event',\n 'malicious link',\n 'suspicious attachment',\n 'credential harvesting',\n 'account takeover',\n 'cleartext password',\n 'plain text password'\n ];\n \n const hasSecurityKeyword = securityKeywords.some(keyword => \n description.includes(keyword) || title.includes(keyword)\n );\n \n // If it's a phishing/security threat, reclassify immediately\n // Exclude ONLY junk reports (user explicitly reported as junk, not phishing)\n if ((isPhishingReport || hasSecurityKeyword || isBlumiraAlert) && !isJunkReport) {\n console.log('→ Detected security threat alert, reclassifying to SOC (161)');\n console.log(' This is a potential security threat requiring SOC investigation');\n \n if (isPhishingReport) {\n console.log(' Trigger: Phishing report detected (title or email headers)');\n }\n if (isBlumiraAlert) {\n console.log(' Trigger: Blumira security alert detected');\n }\n if (hasSecurityKeyword) {\n console.log(' Trigger: Security keyword detected');\n }\n \n ticketCategory = 161;\n } \n // STEP 2: Only check for junk email if NOT a security threat\n else {\n // JUNK EMAIL INDICATORS - These stay in Service Desk (categories 3/159)\n const junkEmailIndicators = [\n 'junk email',\n 'junk mail',\n 'spam email',\n 'spam mail',\n 'unwanted email',\n 'marketing email',\n 'promotional email',\n 'newsletter',\n 'too many emails',\n 'stop receiving',\n 'remove from list',\n 'email clutter',\n 'inbox clutter',\n 'spam folder',\n 'junk folder',\n 'mark as junk',\n 'mark as spam',\n 'blocking sender',\n 'block email',\n 'filter spam',\n 'filter junk'\n ];\n \n const isJunkEmailComplaint = junkEmailIndicators.some(indicator => \n description.includes(indicator) || title.includes(indicator)\n );\n \n if (isJunkEmailComplaint) {\n console.log('→ Detected junk/spam email complaint - keeping in Service Desk');\n console.log(' This is NOT a security threat, user wants help with email filtering');\n // Do not reclassify - let it stay as Service Desk ticket\n }\n }\n }\n \n // RULE 3: Detect Zoom User Tickets (not monitoring alerts)\n // Only check if still in Service Desk categories (not already reclassified)\n if ([3, 159].includes(ticketCategory)) {\n \n // Conference room indicators - likely Zoom Rooms\n const conferenceRoomIndicators = [\n 'conference room',\n 'meeting room',\n 'boardroom',\n 'board room',\n 'conference space',\n 'room', // Generic but combined with camera/video/audio keywords\n ];\n \n // Zoom-specific keywords\n const zoomKeywords = [\n 'zoom',\n 'zoom meeting',\n 'zoom app',\n 'zoom client',\n 'zoom call',\n 'zoom conference',\n 'zoom video',\n 'zoom audio',\n 'zoom screen share',\n 'zoom recording',\n 'zoom room'\n ];\n \n // Video conferencing issue indicators\n const videoConferencingIssues = [\n 'camera',\n 'video',\n 'microphone',\n 'audio',\n 'screen share',\n 'presentation',\n 'display',\n 'projector'\n ];\n \n const hasZoomKeyword = zoomKeywords.some(keyword => \n description.includes(keyword) || title.includes(keyword)\n );\n \n const isZoomSubIssueType = subIssueType === '686' || subIssueType === 686;\n \n // Check if this is a conference room AV issue (likely Zoom Room)\n const hasConferenceRoomKeyword = conferenceRoomIndicators.some(keyword => \n description.includes(keyword) || title.includes(keyword)\n );\n \n const hasVideoConferencingIssue = videoConferencingIssues.some(keyword => \n description.includes(keyword) || title.includes(keyword)\n );\n \n // Conference room + AV issue = likely Zoom Room\n const isConferenceRoomAVIssue = hasConferenceRoomKeyword && hasVideoConferencingIssue;\n \n if (hasZoomKeyword || isZoomSubIssueType || isConferenceRoomAVIssue) {\n isZoomUserTicket = true;\n \n if (isZoomSubIssueType) {\n zoomDetectionReason = 'Zoom subIssueType (686) detected';\n } else if (isConferenceRoomAVIssue) {\n zoomDetectionReason = 'Conference room AV issue detected - likely Zoom Room';\n } else {\n zoomDetectionReason = 'Zoom keyword detected in title/description';\n }\n \n console.log('→ Detected Zoom user ticket (not monitoring alert)');\n console.log(' Reason:', zoomDetectionReason);\n console.log(' Will route to Zoom Branch for specialized handling');\n }\n }\n}\n\nconsole.log('Final ticketCategory:', ticketCategory);\nconsole.log('Is Zoom User Ticket:', isZoomUserTicket);\nconsole.log('=== END RECLASSIFICATION ===');\n\n// Transform to the flat structure that AI Agent expects\nreturn {\n json: {\n // Core ticket information\n id: data.entityId || ticketData.Id,\n title: ticketData.Title || '',\n description: ticketData.Description || '',\n \n // Ticket classification fields (with reclassified category)\n ticketType: Number(ticketData.TicketType) || null,\n priority: Number(ticketData.Priority) || null,\n ticketCategory: ticketCategory, // Using reclassified value\n issueType: ticketData.IssueType || '',\n subIssueType: ticketData.SubIssueType || '',\n \n // Additional fields\n companyID: Number(ticketData.CompanyID) || null,\n contactID: Number(ticketData.ContactID) || null,\n queueID: Number(ticketData.QueueID) || null,\n ticketNumber: ticketData.TicketNumber || '',\n createDate: ticketData.TicketCreateDate || '',\n \n // Labels for reference\n ticketType_label: getTicketTypeLabel(ticketData.TicketType),\n priority_label: getPriorityLabel(ticketData.Priority),\n \n // Zoom detection flags for routing\n isZoomUserTicket: isZoomUserTicket,\n zoomDetectionReason: zoomDetectionReason,\n \n // DEBUG OUTPUT - Remove after troubleshooting\n DEBUG_titleLowercase: (ticketData.Title || '').toLowerCase().substring(0, 60),\n DEBUG_titleStartsWithPhishing: (ticketData.Title || '').toLowerCase().startsWith('phishing:'),\n DEBUG_descriptionPreview: (ticketData.Description || '').replace(/\\r\\n/g, ' ').toLowerCase().substring(0, 100),\n DEBUG_descriptionHasSPFFail: (ticketData.Description || '').replace(/\\r\\n/g, ' ').toLowerCase().includes('received-spf: fail'),\n DEBUG_originalCategory: Number(ticketData.TicketCategory),\n DEBUG_finalCategory: ticketCategory,\n DEBUG_wasReclassified: Number(ticketData.TicketCategory) !== ticketCategory,\n DEBUG_descriptionHasUnsubscribe: (ticketData.Description || '').replace(/\\r\\n/g, ' ').toLowerCase().includes('unsubscribe'),\n DEBUG_titleHasUnsubscribe: (ticketData.Title || '').toLowerCase().includes('unsubscribe'),\n DEBUG_titleStartsWithJunk: (ticketData.Title || '').toLowerCase().startsWith('junk:'),\n DEBUG_titleStartsWithSpam: (ticketData.Title || '').toLowerCase().startsWith('spam:'),\n \n // Preserve original data for reference\n originalData: data,\n source: 'Autotask Trigger'\n }\n};" }, "type": "n8n-nodes-base.code", "typeVersion": 2, "position": [ 640, 608 ], "id": "b4cad91b-441d-4070-959e-7376df1325f4", "name": "All Deciding Node (Robotic)" }, { "parameters": { "conditions": { "options": { "caseSensitive": true, "leftValue": "", "typeValidation": "loose", "version": 2 }, "conditions": [ { "id": "d2e61fae-e940-49a3-9a11-be410916daab", "leftValue": "={{ ![29861409, 29783545, 29861361, 29702433].includes(Number($json.entityData.CompanyID)) }}", "rightValue": "true", "operator": { "type": "string", "operation": "equals", "name": "filter.operator.equals" } } ], "combinator": "and" }, "looseTypeValidation": true, "options": {} }, "type": "n8n-nodes-base.if", "typeVersion": 2.2, "position": [ 192, 576 ], "id": "b7693d8a-44e4-429f-81b1-fbdec7cd0f7c", "name": "Clients triage exclude" }, { "parameters": { "conditions": { "options": { "caseSensitive": true, "leftValue": "", "typeValidation": "loose", "version": 2 }, "conditions": [ { "id": "2cbd37c7-4834-4dd1-bd5b-6796cf38328a", "leftValue": "={{ [\"2\", \"159\", \"3\", \"161\"].includes($json.entityData.TicketCategory) }}", "rightValue": "true", "operator": { "type": "string", "operation": "equals" } } ], "combinator": "and" }, "looseTypeValidation": true, "options": {} }, "type": "n8n-nodes-base.if", "typeVersion": 2.2, "position": [ -240, 576 ], "id": "83b4e852-c5a8-4534-84fc-a37d4f981aca", "name": "Ticket Category triage exclude" }, { "parameters": { "conditions": { "options": { "caseSensitive": true, "leftValue": "", "typeValidation": "strict", "version": 2 }, "conditions": [ { "id": "60748f04-a63e-443b-be08-23acc2a08df7", "leftValue": "={{ $json.body.Fields.CreatorResourceID }}", "rightValue": "30861471", "operator": { "type": "string", "operation": "equals", "name": "filter.operator.equals" } } ], "combinator": "and" }, "options": {} }, "type": "n8n-nodes-base.if", "typeVersion": 2.2, "position": [ -464, 576 ], "id": "89e4a82e-8f26-40d1-965e-3ef983f3cccd", "name": "tech triage exclude" }, { "parameters": { "conditions": { "options": { "caseSensitive": true, "leftValue": "", "typeValidation": "loose", "version": 2 }, "conditions": [ { "id": "e98cd214-5864-433a-b719-0f212fc584f5", "leftValue": "={{ $json.body.PersonId }}", "rightValue": "30861575", "operator": { "type": "string", "operation": "equals", "name": "filter.operator.equals" } } ], "combinator": "and" }, "looseTypeValidation": true, "options": {} }, "type": "n8n-nodes-base.if", "typeVersion": 2.2, "position": [ -688, 576 ], "id": "6fd80f3b-65a9-41bd-9d2c-0eccb6221ab3", "name": "tech triage exclude1" }, { "parameters": { "conditions": { "options": { "caseSensitive": true, "leftValue": "", "typeValidation": "loose", "version": 2 }, "conditions": [ { "id": "9af869f3-ddb9-42f8-b9d2-20030a1b8c17", "leftValue": "={{ $json.ticketType }}", "rightValue": "2", "operator": { "type": "string", "operation": "equals", "name": "filter.operator.equals" } } ], "combinator": "and" }, "looseTypeValidation": true, "options": {} }, "type": "n8n-nodes-base.if", "typeVersion": 2.2, "position": [ 2576, 592 ], "id": "7800a7a7-c444-40e8-968e-25ce7624fd3e", "name": "Incident Check" }, { "parameters": { "jsCode": "// SOC Code Node - Extract from AI Agent output with Validation\nconst data = $input.first().json;\n\nconsole.log('=== SOC BRANCH - Processing Security Alert ===');\nconsole.log('Input keys:', Object.keys(data));\n\nconst aiOutput = data.output;\n\n// ===== VALIDATION FUNCTION (SOC-SPECIFIC) =====\n\nfunction validateSOCData(data) {\n const errors = [];\n const warnings = [];\n \n console.log('\\n════════════════════════════════════════');\n console.log(' SOC VALIDATION');\n console.log('════════════════════════════════════════');\n console.log('Ticket ID:', data.id);\n console.log('────────────────────────────────────────\\n');\n \n // 1. TITLE VALIDATION\n console.log('1️⃣ Validating Title...');\n if (!data.title || data.title.trim().length < 10) {\n console.log(' ❌ Title too short or missing');\n errors.push({\n field: 'title',\n severity: 'error',\n issue: 'Title is too short or missing (minimum 10 characters)',\n current: data.title,\n instruction: 'Provide a specific security alert title'\n });\n } else {\n console.log(' ✅ Title OK -', data.title.length, 'chars');\n }\n \n // 2. DESCRIPTION PRESERVATION\n console.log('2️⃣ Description Preservation...');\n console.log(' ✅ SOC tickets preserve original description');\n console.log(' Description length:', data.description?.length || 0, 'chars');\n \n // 3. SOC CLASSIFICATION VALIDATION\n console.log('3️⃣ Validating SOC Classification...');\n \n const ticketType = Number(data.ticketType);\n const priority = Number(data.priority);\n const ticketCategory = Number(data.ticketCategory);\n \n console.log(' ticketType:', ticketType);\n console.log(' priority:', priority);\n console.log(' ticketCategory:', ticketCategory);\n \n // Verify category is SOC\n if (ticketCategory !== 161) {\n console.log(' ⚠️ Not a SOC ticket (category should be 161)');\n warnings.push({\n field: 'ticketCategory',\n severity: 'warning',\n issue: `ticketCategory is ${ticketCategory}, expected 161 for SOC`,\n current: ticketCategory\n });\n }\n \n // Verify ticketType is Incident or Alert (NEVER Service Request)\n if (ticketType === 1) {\n console.log(' ❌ SOC ticket classified as Service Request - INVALID');\n errors.push({\n field: 'ticketType',\n severity: 'error',\n issue: 'SOC alerts cannot be Service Requests',\n current: ticketType,\n instruction: 'Change ticketType to 2 (Incident) or 5 (Alert)',\n correctValue: 2\n });\n } else if (ticketType !== 2 && ticketType !== 5) {\n console.log(' ⚠️ Unusual ticketType for SOC:', ticketType);\n warnings.push({\n field: 'ticketType',\n severity: 'warning',\n issue: `ticketType ${ticketType} is unusual for SOC (expected 2 or 5)`,\n current: ticketType\n });\n } else {\n console.log(' ✅ ticketType OK');\n }\n \n // Verify priority is valid for security\n const validSOCPriorities = [2, 4, 6, 7];\n if (!validSOCPriorities.includes(priority)) {\n console.log(' ❌ Invalid priority for SOC:', priority);\n errors.push({\n field: 'priority',\n severity: 'error',\n issue: `Priority ${priority} is not valid for SOC alerts`,\n current: priority,\n instruction: 'Use valid SOC priorities: 2 (Medium), 4 (Critical), 6 (High), or 7 (Security Event)',\n correctValue: 6\n });\n } else {\n console.log(' ✅ Priority OK');\n }\n \n // 4. TRIAGE NOTE VALIDATION\n console.log('4️⃣ Validating Triage Note...');\n if (!data.triageNotes || data.triageNotes.trim().length < 50) {\n console.log(' ❌ Triage note missing or too short');\n errors.push({\n field: 'triageNotes',\n severity: 'error',\n issue: 'Internal triage note is missing or too short',\n current: data.triageNotes?.substring(0, 100),\n instruction: 'Generate complete triage analysis with threat assessment and investigation guidance'\n });\n } else {\n console.log(' ✅ Triage note OK -', data.triageNotes.length, 'chars');\n }\n \n // 5. PRESERVE ISSUE/SUBISSUE (NO VALIDATION)\n console.log('5️⃣ Field Preservation Check...');\n console.log(' 🔒 SOC tickets preserve issueType/subIssueType as-is');\n console.log(' issueType:', data.issueType);\n console.log(' subIssueType:', data.subIssueType);\n console.log(' ✅ No parent-child validation for SOC');\n \n console.log('\\n────────────────────────────────────────');\n console.log('Validation Summary:');\n console.log(' Errors:', errors.length);\n console.log(' Warnings:', warnings.length);\n console.log('════════════════════════════════════════\\n');\n \n return {\n isValid: errors.length === 0,\n hasWarnings: warnings.length > 0,\n errorCount: errors.length,\n warningCount: warnings.length,\n errors,\n warnings\n };\n}\n\n// ===== HELPER FUNCTIONS =====\n\nfunction extractTicketId(aiOutput) {\n let ticketIdMatch = aiOutput?.match(/\\*\\*Ticket ID:\\s*(\\d+)\\*\\*/);\n if (ticketIdMatch) {\n console.log('Ticket ID found (bold format):', ticketIdMatch[1]);\n return Number(ticketIdMatch[1]);\n }\n \n ticketIdMatch = aiOutput?.match(/Ticket ID:\\s*(\\d+)/);\n if (ticketIdMatch) {\n console.log('Ticket ID found (plain format):', ticketIdMatch[1]);\n return Number(ticketIdMatch[1]);\n }\n \n console.log('WARNING: No ticket ID found in AI output');\n return null;\n}\n\nfunction extractTitleDecision(aiOutput) {\n console.log('Extracting title decision from AI output...');\n \n // Look for Title Decision line\n const decisionMatch = aiOutput?.match(/\\*\\*Title Decision\\*\\*:\\s*(PRESERVE|UPDATE)/);\n \n if (decisionMatch) {\n const decision = decisionMatch[1];\n console.log('Title decision:', decision);\n return decision;\n }\n \n console.log('WARNING: No title decision found in AI output');\n return null;\n}\n\nfunction extractTitle(aiOutput) {\n console.log('Extracting title from AI output...');\n \n // Try new format first: **Title**: [title on same line]\n let titleMatch = aiOutput?.match(/\\*\\*Title\\*\\*:\\s*([^\\n]+)/);\n \n if (titleMatch) {\n const title = titleMatch[1].trim();\n console.log('Title extracted (new format):', title.substring(0, 80));\n return title;\n }\n \n // Fallback to old format: **Updated Title**: [title on same line]\n titleMatch = aiOutput?.match(/\\*\\*Updated Title\\*\\*:\\s*([^\\n]+)/);\n \n if (titleMatch) {\n const title = titleMatch[1].trim();\n console.log('Title extracted (old format - same line):', title.substring(0, 80));\n return title;\n }\n \n // Fallback to old format with title on next line: **Updated Title**:\\n[title]\n titleMatch = aiOutput?.match(/\\*\\*Updated Title\\*\\*:\\s*\\n([^\\n]+)/);\n \n if (titleMatch) {\n const title = titleMatch[1].trim();\n console.log('Title extracted (old format - next line):', title.substring(0, 80));\n return title;\n }\n \n console.log('ERROR: No title found in AI output');\n console.log('AI output snippet:', aiOutput?.substring(0, 500));\n return null;\n}\n\nfunction extractQueueFromAI(aiOutput) {\n console.log('Extracting queue assignment from SOC AI output...');\n \n const fieldIDsMatch = aiOutput?.match(/```json\\s*\\n?\\s*\\{[^}]+\\}\\s*\\n?\\s*```/);\n if (fieldIDsMatch) {\n try {\n const jsonContent = fieldIDsMatch[0].replace(/```json\\s*\\n?|\\n?\\s*```/g, '');\n const fieldIDs = JSON.parse(jsonContent);\n \n if (fieldIDs.queueID) {\n console.log('SOC AI recommended queueID:', fieldIDs.queueID);\n return fieldIDs.queueID;\n }\n } catch (error) {\n console.log('Error parsing SOC AI FieldIDs:', error.message);\n }\n }\n \n console.log('No queueID found in AI output, using SOC default: Level 2');\n return 29682969;\n}\n\nfunction extractFieldIDs(aiOutput) {\n console.log('Extracting field IDs from AI output...');\n \n const fieldIDsMatch = aiOutput?.match(/```json\\s*\\n?\\s*\\{[^}]+\\}\\s*\\n?\\s*```/);\n if (fieldIDsMatch) {\n try {\n const jsonContent = fieldIDsMatch[0].replace(/```json\\s*\\n?|\\n?\\s*```/g, '');\n const fieldIDs = JSON.parse(jsonContent);\n console.log('Extracted field IDs:', fieldIDs);\n return fieldIDs;\n } catch (error) {\n console.log('Error parsing SOC AI FieldIDs:', error.message);\n }\n }\n \n return {};\n}\n\nfunction extractTriageNote(aiOutput) {\n console.log('Extracting internal triage note from AI output...');\n \n // Match the Internal Triage Note section with code fence\n // Updated regex to handle the note properly closing before ### FieldIDs Output\n const triageMatch = aiOutput?.match(/\\*\\*Internal Triage Note\\*\\*:\\s*```\\s*\\n?([\\s\\S]*?)```\\s*\\n*###\\s*FieldIDs Output/m);\n \n if (triageMatch) {\n let triageNote = triageMatch[1].trim();\n console.log('Triage note extracted:', triageNote.length, 'chars');\n return triageNote;\n }\n \n console.log('WARNING: Could not extract triage note from AI output');\n return '';\n}\n\n// ===== MAIN PROCESSING =====\n\nconsole.log('Processing SOC security alert...');\nconsole.log('DEBUG - data.title:', data.title);\n\nconst ticketId = extractTicketId(aiOutput);\n\nif (!ticketId) {\n throw new Error('No ticket ID found in SOC AI output. Check AI response format.');\n}\n\nconsole.log('SOC Ticket ID confirmed:', ticketId);\n\n// Extract title (always present in AI output now)\nconst titleDecision = extractTitleDecision(aiOutput);\nconst extractedTitle = extractTitle(aiOutput);\n\nif (!extractedTitle) {\n console.log('ERROR: Title extraction failed - flagging for manual review');\n \n // Don't throw error - return data with error flag for IF node routing\n return [{\n json: {\n id: ticketId,\n _titleExtractionFailed: true,\n _errorReason: 'Could not extract title from AI output',\n output: aiOutput,\n attemptNumber: data.attemptNumber || 1\n }\n }];\n}\n\nconsole.log('Title decision:', titleDecision);\nconsole.log('Extracted title:', extractedTitle.substring(0, 100));\n\nconst extractedFieldIDs = extractFieldIDs(aiOutput);\nconst aiQueueID = extractQueueFromAI(aiOutput);\nconst triageNote = extractTriageNote(aiOutput);\n\n// ===== DETERMINE ISSUE TYPE / SUB-ISSUE TYPE =====\nconsole.log('Determining issueType/subIssueType based on alert content...');\n\nlet issueType = extractedFieldIDs.issueType;\nlet subIssueType = extractedFieldIDs.subIssueType;\n\n// If not already set, determine based on title content\nif (!issueType || issueType === null || issueType === \"\") {\n \n // Check for Phish Alert tag or phishing keywords\n if (extractedTitle?.match(/\\[phish alert\\]/i) || extractedTitle?.match(/phishing/i)) {\n issueType = 34; // Email\n subIssueType = 316; // Phishing (generic)\n console.log('Detected phishing alert - set to Email/Phishing');\n }\n // Check for malware/virus/trojan\n else if (extractedTitle?.match(/malware|virus|trojan|ransomware/i)) {\n issueType = 59; // Security\n subIssueType = 554; // Malware\n console.log('Detected malware alert - set to Security/Malware');\n }\n // Check for Huntress monitoring alerts\n else if (extractedTitle?.match(/huntress/i)) {\n issueType = 78; // Huntress Monitoring\n subIssueType = 778; // Huntress Detection (default)\n console.log('Detected Huntress alert - set to Huntress Monitoring/Detection');\n }\n // Check for SentinelOne monitoring alerts\n else if (extractedTitle?.match(/sentinelone|sentinel/i)) {\n issueType = 80; // SentinelOne Monitoring\n subIssueType = 790; // New active threat (default)\n console.log('Detected SentinelOne alert - set to SentinelOne Monitoring/New active threat');\n }\n // Check for Blumira monitoring alerts\n else if (extractedTitle?.match(/blumira/i)) {\n issueType = 83; // Blumira Monitoring\n subIssueType = 870; // Threat (default)\n console.log('Detected Blumira alert - set to Blumira Monitoring/Threat');\n }\n // Check for DUO monitoring alerts\n else if (extractedTitle?.match(/duo|mfa|multi.?factor/i)) {\n issueType = 77; // DUO Monitoring\n subIssueType = 775; // Account Lockout (default)\n console.log('Detected DUO alert - set to DUO Monitoring/Account Lockout');\n }\n // Check for compromised account\n else if (extractedTitle?.match(/compromised|breach|credential/i)) {\n issueType = 59; // Security\n subIssueType = 552; // Compromised Account\n console.log('Detected compromised account - set to Security/Compromised Account');\n }\n // Default to general Security\n else {\n issueType = 59; // Security\n subIssueType = 479; // Other\n console.log('No specific match - defaulting to Security/Other');\n }\n}\n\nconsole.log('Extraction results:');\nconsole.log('- Title decision:', titleDecision);\nconsole.log('- Final title:', extractedTitle?.substring(0, 100));\nconsole.log('- Triage note:', triageNote.length, 'chars');\nconsole.log('- FieldIDs extracted:', Object.keys(extractedFieldIDs).join(', '));\n\n// Build final payload\nconst finalPayload = {\n id: ticketId,\n title: extractedTitle, // ✅ EXTRACTED FROM AI OUTPUT\n description: data.description || '', // ✅ FROM ORIGINAL (if available) OR EMPTY\n triageNotes: triageNote, // ✅ EXTRACTED FROM AI OUTPUT\n ticketType: extractedFieldIDs.ticketType || data.ticketType,\n priority: extractedFieldIDs.priority || data.priority,\n ticketCategory: extractedFieldIDs.ticketCategory || 161,\n issueType: issueType, // ✅ DETERMINED BY CODE NODE\n subIssueType: subIssueType, // ✅ DETERMINED BY CODE NODE\n contactID: extractedFieldIDs.contactID !== undefined ? extractedFieldIDs.contactID : data.contactID, // ✅ PRESERVED FROM AI OR ORIGINAL\n queueID: aiQueueID,\n status: 47\n};\n\nconsole.log('Final payload values:');\nconsole.log('- Title:', finalPayload.title?.substring(0, 80));\nconsole.log('- Description (original):', finalPayload.description?.length, 'chars');\nconsole.log('- Triage notes:', finalPayload.triageNotes?.length, 'chars');\nconsole.log('- ticketType:', finalPayload.ticketType);\nconsole.log('- priority:', finalPayload.priority);\nconsole.log('- issueType:', finalPayload.issueType);\nconsole.log('- subIssueType:', finalPayload.subIssueType);\nconsole.log('- contactID:', finalPayload.contactID);\nconsole.log('- queueID:', finalPayload.queueID);\n\n// ===== RUN VALIDATION =====\n\nconst validation = validateSOCData(finalPayload);\nconst attemptNumber = data.attemptNumber || 1;\nconst maxAttempts = 2;\n\nif (!validation.isValid) {\n console.log('\\n🚨 VALIDATION FAILED 🚨\\n');\n \n if (attemptNumber < maxAttempts) {\n console.log(`⚠️ Attempt ${attemptNumber}/${maxAttempts} - Flagging for retry\\n`);\n \n validation.errors.forEach((err, i) => {\n console.log(`Error ${i+1} - ${err.field}:`);\n console.log(` ${err.issue}`);\n });\n \n return [{\n json: {\n ...finalPayload,\n _validationFailed: true,\n _validationErrors: validation.errors,\n _validationWarnings: validation.warnings,\n attemptNumber: attemptNumber + 1,\n _retryReason: 'validation_failed',\n _errorSummary: validation.errors.map(e => `${e.field}: ${e.issue}`).join(' | ')\n }\n }];\n \n } else {\n console.log('❌ MAX ATTEMPTS REACHED - Stopping\\n');\n \n return [{\n json: {\n ...finalPayload,\n _validationFailed: true,\n _maxAttemptsReached: true,\n _validationErrors: validation.errors,\n _validationWarnings: validation.warnings,\n attemptNumber,\n _errorSummary: validation.errors.map(e => `${e.field}: ${e.issue}`).join(' | ')\n }\n }];\n }\n}\n\nconsole.log('\\n✅ VALIDATION PASSED ✅');\n\nif (validation.hasWarnings) {\n console.log('\\n⚠️ Warnings (non-blocking):');\n validation.warnings.forEach((warn, i) => {\n console.log(` ${i+1}. ${warn.field}: ${warn.issue}`);\n });\n}\n\nconsole.log('\\nProceeding to Autotask update...\\n');\n\nreturn [{\n json: {\n ...finalPayload,\n _validationFailed: false,\n _validationWarnings: validation.warnings,\n attemptNumber\n }\n}];" }, "type": "n8n-nodes-base.code", "typeVersion": 2, "position": [ 2368, 0 ], "id": "9ff60034-2557-4820-95be-c00b42a3c214", "name": "SOC Extract & Validate", "alwaysOutputData": true, "onError": "continueRegularOutput" }, { "parameters": { "jsCode": "// Code Node: Format Troubleshooting Steps for Internal Note\nconst data = $input.first().json;\n\nconsole.log('Processing troubleshooting output...');\nconsole.log('Input keys:', Object.keys(data));\n\n// Extract ticket ID from AI output\nfunction extractTicketId(aiOutput) {\n const ticketIdMatch = aiOutput?.match(/\\*\\*Ticket ID:\\s*(\\d+)\\*\\*/);\n if (ticketIdMatch) {\n console.log('Ticket ID found:', ticketIdMatch[1]);\n return Number(ticketIdMatch[1]);\n }\n console.log('WARNING: No ticket ID found in AI output');\n return null;\n}\n\n// Clean and format the troubleshooting content\nfunction formatTroubleshootingSteps(aiOutput) {\n if (!aiOutput || typeof aiOutput !== 'string') {\n return 'No troubleshooting steps available.';\n }\n \n // Remove the ticket ID line since we extract it separately\n let content = aiOutput.replace(/\\*\\*Ticket ID:\\s*\\d+\\*\\*\\n?/g, '');\n \n // Clean up markdown formatting for better readability in Autotask\n content = content\n // Convert headers to cleaner format\n .replace(/^##\\s+/gm, '')\n .replace(/^###\\s+/gm, '')\n \n // Clean up bullet points and preserve section headers\n .replace(/^\\d+\\.\\s+\\*\\*(.*?)\\*\\*:\\s*/gm, '$1:\\n')\n .replace(/^\\d+\\.\\s+/gm, '• ')\n .replace(/^-\\s+/gm, ' - ')\n \n // Remove question marks that appear as section markers\n .replace(/^\\?\\s+/gm, '\\n')\n .replace(/\\?\\s+(Initial Assessment|Primary Resolution|Alternative Approaches|Escalation Criteria)/gm, '\\n$1')\n \n // Remove excessive spacing\n .replace(/\\n{3,}/g, '\\n\\n')\n .trim();\n \n return content;\n}\n\n// Extract ticket ID\nconst ticketId = extractTicketId(data.output);\n\n// Format the troubleshooting content\nconst formattedSteps = formatTroubleshootingSteps(data.output);\n\n// Build the internal note content\nconst internalNote = `AUTOMATED TROUBLESHOOTING GUIDANCE\n\n${formattedSteps}\n\n────────────────────────────────────────\nThis guidance was automatically generated based on the incident classification and description. Follow these steps in order, documenting results for each step. If the issue persists after completing the Primary Resolution steps, proceed to Alternative Approaches or escalate as indicated.`;\n\nconsole.log('Formatted troubleshooting note preview:', internalNote.substring(0, 200) + '...');\n\n// Prepare output for Autotask internal note\nconst finalOutput = {\n ticketId: ticketId,\n internalNote: internalNote,\n noteType: 'Technical Guidance', // Or whatever note type you use\n isVisibleToCustomer: false // Internal note only\n};\n\nconsole.log('Final output for Autotask:', {\n ticketId: finalOutput.ticketId,\n noteLength: finalOutput.internalNote.length,\n noteType: finalOutput.noteType\n});\n\n// Return in N8N format\nreturn [{\n json: finalOutput\n}];" }, "type": "n8n-nodes-base.code", "typeVersion": 2, "position": [ 3152, 592 ], "id": "aa106737-d54f-4c4d-b08e-05d9b4eccc0c", "name": "Format Troubleshooting for Internal Note", "onError": "continueRegularOutput" }, { "parameters": { "jsCode": "// NOC Code Node - Extract from AI Agent output with Validation\nconst data = $input.first().json;\n\nconsole.log('=== NOC BRANCH - Processing Infrastructure Alert ===');\nconsole.log('Input keys:', Object.keys(data));\n\nconst aiOutput = data.output;\n\n// ===== VALIDATION FUNCTION (NOC-SPECIFIC) =====\n\nfunction validateNOCData(data) {\n const errors = [];\n const warnings = [];\n \n console.log('\\n════════════════════════════════════════');\n console.log(' NOC VALIDATION');\n console.log('════════════════════════════════════════');\n console.log('Ticket ID:', data.id);\n console.log('────────────────────────────────────────\\n');\n \n // 1. TITLE VALIDATION\n console.log('1️⃣ Validating Title...');\n if (!data.title || data.title.trim().length < 10) {\n console.log(' ❌ Title too short or missing');\n errors.push({\n field: 'title',\n severity: 'error',\n issue: 'Title is too short or missing (minimum 10 characters)',\n current: data.title,\n instruction: 'Provide a specific infrastructure alert title with device name and context'\n });\n } else {\n const genericTitles = ['infrastructure alert', 'alert', 'monitoring alert', 'noc alert'];\n const isGeneric = genericTitles.some(g => data.title.toLowerCase().trim() === g);\n \n if (isGeneric) {\n console.log(' ❌ Title is too generic:', data.title);\n errors.push({\n field: 'title',\n severity: 'error',\n issue: `Title \"${data.title}\" is too generic for NOC analysis`,\n current: data.title,\n instruction: 'Create specific title like \"Disk Space Alert - SERVER01 - C: Drive 90% Full\" or \"Service Monitor - DEVICE - HuntressAgent Stopped\"'\n });\n } else {\n console.log(' ✅ Title OK');\n }\n }\n \n // 2. DESCRIPTION VALIDATION\n console.log('2️⃣ Validating Description...');\n if (!data.description || data.description.trim().length < 50) {\n console.log(' ❌ Description too short or missing');\n errors.push({\n field: 'description',\n severity: 'error',\n issue: 'Description is too short or missing (minimum 50 characters for infrastructure alerts)',\n current: data.description?.substring(0, 100),\n instruction: 'Provide complete alert details using the template with device info, metrics, thresholds, etc.'\n });\n } else {\n const placeholders = ['infrastructure alert requires review', 'monitoring alert', 'see title', 'n/a', 'tbd'];\n const isPlaceholder = placeholders.some(p => data.description.toLowerCase().trim() === p);\n \n if (isPlaceholder) {\n console.log(' ❌ Description is a placeholder');\n errors.push({\n field: 'description',\n severity: 'error',\n issue: 'Description is a placeholder, not actual alert details',\n current: data.description,\n instruction: 'Use the NOC alert template with complete device info, metrics, and raw alert data'\n });\n } else {\n console.log(' ✅ Description OK');\n }\n }\n \n // 3. NOC FIELD PRESERVATION CHECK (INFORMATIONAL)\n console.log('3️⃣ Field Preservation Check...');\n console.log(' 🔒 NOC tickets preserve all classification fields as-is');\n console.log(' ticketType:', data.ticketType);\n console.log(' issueType:', data.issueType);\n console.log(' subIssueType:', data.subIssueType);\n console.log(' priority:', data.priority);\n console.log(' ✅ No validation - fields preserved from monitoring system');\n \n console.log('\\n────────────────────────────────────────');\n console.log('Validation Summary:');\n console.log(' Errors:', errors.length);\n console.log(' Warnings:', warnings.length);\n console.log('════════════════════════════════════════\\n');\n \n return {\n isValid: errors.length === 0,\n hasWarnings: warnings.length > 0,\n errorCount: errors.length,\n warningCount: warnings.length,\n errors,\n warnings\n };\n}\n\n// ===== HELPER FUNCTIONS =====\n\nfunction extractTicketId(aiOutput) {\n let ticketIdMatch = aiOutput?.match(/\\*\\*Ticket ID:\\s*(\\d+)\\*\\*/);\n if (ticketIdMatch) {\n console.log('Ticket ID found (bold format):', ticketIdMatch[1]);\n return Number(ticketIdMatch[1]);\n }\n \n ticketIdMatch = aiOutput?.match(/Ticket ID:\\s*(\\d+)/);\n if (ticketIdMatch) {\n console.log('Ticket ID found (plain format):', ticketIdMatch[1]);\n return Number(ticketIdMatch[1]);\n }\n \n console.log('WARNING: No ticket ID found in AI output');\n return null;\n}\n\nfunction extractPolicyName(text) {\n if (!text) return '';\n const match = text.match(/within the policy [\"\"]([^\"\"]+)[\"\"]/) ;\n return match ? match[1] : '';\n}\n\nfunction extractDeviceName(text) {\n if (!text) return '';\n \n const pattern1 = /for\\s+([A-Z]{2,3}-?\\d{3,4})/i;\n const match1 = text.match(pattern1);\n if (match1) return match1[1];\n \n const pattern2 = /\\b([A-Z]{2,4}[A-Z]{2,3}[A-Z]{2,3}\\d{2})\\b/;\n const match2 = text.match(pattern2);\n if (match2) return match2[1];\n \n const pattern3 = /\\b([A-Z]{2,3}-?\\d{3,4})\\b/;\n const match3 = text.match(pattern3);\n if (match3) return match3[1];\n \n return '';\n}\n\nfunction determineQueue(description, title, priority) {\n console.log('=== QUEUE DETERMINATION LOGIC ===');\n \n const searchText = `${description} ${title}`.toLowerCase();\n const policyName = extractPolicyName(description);\n const deviceName = extractDeviceName(description);\n \n console.log('Policy Name:', policyName);\n console.log('Device Name:', deviceName);\n console.log('Priority:', priority);\n \n if (priority === 4 || priority === '4') {\n console.log('✅ Queue Decision: Level 2 (29682969) - Critical Priority');\n return 29682969;\n }\n \n if (policyName.toLowerCase().includes('windows workstation')) {\n console.log('✅ Queue Decision: Level 1 (29682833) - Windows Workstation Policy');\n return 29682833;\n }\n \n if (policyName.toLowerCase().includes('server') || \n policyName.toLowerCase().includes('hypervisor')) {\n console.log('✅ Queue Decision: Level 2 (29682969) - Server/Hypervisor Policy');\n return 29682969;\n }\n \n if (/\\b(DT|LT|SP)-?\\d{3,4}\\b/i.test(`${searchText} ${deviceName}`)) {\n console.log('✅ Queue Decision: Level 1 (29682833) - Workstation Device Name Pattern');\n return 29682833;\n }\n \n if (/\\b[A-Z]{2,4}[A-Z]{2,3}[A-Z]{2,3}\\d{2}\\b/.test(deviceName)) {\n console.log('✅ Queue Decision: Level 2 (29682969) - Server Device Name Pattern');\n return 29682969;\n }\n \n const serverKeywords = [\n 'server', 'domain controller', 'file server', 'sql server',\n 'exchange server', 'dns server', 'dhcp server', 'hypervisor',\n 'esxi', 'hyper-v', 'virtual machine host'\n ];\n \n const workstationKeywords = [\n 'workstation', 'desktop', 'laptop', 'end-user device',\n 'client machine', 'client computer', 'user pc'\n ];\n \n for (const keyword of serverKeywords) {\n if (searchText.includes(keyword)) {\n console.log(`✅ Queue Decision: Level 2 (29682969) - Server Keyword: ${keyword}`);\n return 29682969;\n }\n }\n \n for (const keyword of workstationKeywords) {\n if (searchText.includes(keyword)) {\n console.log(`✅ Queue Decision: Level 1 (29682833) - Workstation Keyword: ${keyword}`);\n return 29682833;\n }\n }\n \n console.log('⚠️ Queue Decision: Level 2 (29682969) - Default (Unable to Determine)');\n return 29682969;\n}\n\nfunction extractQueueFromAI(aiOutput) {\n console.log('Extracting queue assignment from NOC AI output...');\n \n const fieldIDsMatch = aiOutput?.match(/```json\\s*\\n?\\s*\\{[^}]+\\}\\s*\\n?\\s*```/);\n if (fieldIDsMatch) {\n try {\n const jsonContent = fieldIDsMatch[0].replace(/```json\\s*\\n?|\\n?\\s*```/g, '');\n const fieldIDs = JSON.parse(jsonContent);\n \n if (fieldIDs.queueID) {\n console.log(`NOC AI recommended queueID: ${fieldIDs.queueID}`);\n return fieldIDs.queueID;\n }\n } catch (error) {\n console.log('Error parsing NOC AI FieldIDs:', error.message);\n }\n }\n \n console.log('No queueID found in AI output');\n return null;\n}\n\nfunction extractFieldIDs(aiOutput) {\n console.log('Extracting field IDs from AI output...');\n \n const fieldIDsMatch = aiOutput?.match(/```json\\s*\\n?\\s*\\{[^}]+\\}\\s*\\n?\\s*```/);\n if (fieldIDsMatch) {\n try {\n const jsonContent = fieldIDsMatch[0].replace(/```json\\s*\\n?|\\n?\\s*```/g, '');\n const fieldIDs = JSON.parse(jsonContent);\n console.log('Extracted field IDs:', fieldIDs);\n return fieldIDs;\n } catch (error) {\n console.log('Error parsing AI FieldIDs:', error.message);\n }\n }\n \n return {};\n}\n\nfunction extractCorrectedTitle(markdown) {\n if (!markdown || typeof markdown !== 'string') {\n return null;\n }\n \n const titleMatch = markdown?.match(/\\*\\*Corrected Title\\*\\*:\\s*([^\\n]+)/m);\n if (titleMatch) {\n let raw = titleMatch[1].trim();\n const cleaned = raw.replace(/^[\"'🔒🔧]+|[\"'🔒🔧]+$/g, '').trim();\n \n if (cleaned.toLowerCase().includes('no change necessary') || \n cleaned.toLowerCase().includes('no change needed') ||\n !cleaned) {\n return null;\n }\n \n return cleaned;\n }\n return null;\n}\n\nfunction extractCorrectedDescription(markdown) {\n if (!markdown || typeof markdown !== 'string') {\n return null;\n }\n \n const codeBlockMatch = markdown?.match(/\\*\\*Rewritten Description\\*\\*:\\s*```\\s*\\n?([\\s\\S]*?)```/m);\n if (codeBlockMatch) {\n let content = codeBlockMatch[1].trim();\n \n if (content.toLowerCase().includes('no change necessary') || \n content.toLowerCase().includes('no change needed') ||\n !content) {\n return null;\n }\n \n return content;\n }\n \n const descMatch = markdown?.match(/\\*\\*Rewritten Description\\*\\*:\\s*\\n([\\s\\S]*?)(?=\\*\\*Queue Assignment\\*\\*|### FieldIDs Output)/m);\n if (descMatch) {\n let content = descMatch[1].trim();\n \n if (content.toLowerCase().includes('no change necessary') || \n content.toLowerCase().includes('no change needed') ||\n !content) {\n return null;\n }\n \n return content;\n }\n \n return null;\n}\n\n// ===== MAIN PROCESSING =====\n\nconsole.log('Processing NOC infrastructure alert...');\n\nconst ticketId = extractTicketId(aiOutput);\n\nif (!ticketId) {\n throw new Error(`No ticket ID found in NOC AI output. Check AI response format.`);\n}\n\nconsole.log('✅ NOC Ticket ID confirmed:', ticketId);\n\nconst extractedFieldIDs = extractFieldIDs(aiOutput);\nconst aiQueueID = extractQueueFromAI(aiOutput);\n\nconst extractedTitle = extractCorrectedTitle(aiOutput);\nconst extractedDesc = extractCorrectedDescription(aiOutput);\n\nconst finalTitle = (extractedTitle && extractedTitle.trim()) \n ? extractedTitle \n : 'Infrastructure Alert';\n\nconst finalDescription = (extractedDesc && extractedDesc.trim()) \n ? extractedDesc \n : 'Infrastructure alert requires review';\n\nconst determinedQueueID = determineQueue(\n finalDescription, \n finalTitle, \n extractedFieldIDs.priority\n);\n\nconst finalQueueID = determinedQueueID || aiQueueID || 29682969;\n\nconst finalPayload = {\n id: ticketId,\n title: finalTitle,\n description: finalDescription,\n triageNotes: aiOutput || '',\n ticketType: extractedFieldIDs.ticketType,\n priority: extractedFieldIDs.priority,\n ticketCategory: extractedFieldIDs.ticketCategory || 2,\n issueType: extractedFieldIDs.issueType,\n subIssueType: extractedFieldIDs.subIssueType,\n queueID: finalQueueID,\n status: 47\n};\n\nconsole.log('Extracted values from AI:');\nconsole.log('- Title:', finalPayload.title?.substring(0, 80));\nconsole.log('- Description length:', finalPayload.description?.length);\nconsole.log('- Preserved fields:', {\n ticketType: finalPayload.ticketType,\n issueType: finalPayload.issueType,\n subIssueType: finalPayload.subIssueType,\n priority: finalPayload.priority\n});\n\n// ===== RUN VALIDATION =====\n\nconst validation = validateNOCData(finalPayload);\nconst attemptNumber = data.attemptNumber || 1;\nconst maxAttempts = 2;\n\nif (!validation.isValid) {\n console.log('\\n🚨 VALIDATION FAILED 🚨\\n');\n \n if (attemptNumber < maxAttempts) {\n console.log(`⚠️ Attempt ${attemptNumber}/${maxAttempts} - Flagging for retry\\n`);\n \n validation.errors.forEach((err, i) => {\n console.log(`Error ${i+1} - ${err.field}:`);\n console.log(` ${err.issue}`);\n });\n \n return [{\n json: {\n ...finalPayload,\n _validationFailed: true,\n _validationErrors: validation.errors,\n _validationWarnings: validation.warnings,\n attemptNumber: attemptNumber + 1,\n _retryReason: 'validation_failed',\n _errorSummary: validation.errors.map(e => `${e.field}: ${e.issue}`).join(' | ')\n }\n }];\n \n } else {\n console.log('❌ MAX ATTEMPTS REACHED - Stopping\\n');\n \n return [{\n json: {\n ...finalPayload,\n _validationFailed: true,\n _maxAttemptsReached: true,\n _validationErrors: validation.errors,\n _validationWarnings: validation.warnings,\n attemptNumber,\n _errorSummary: validation.errors.map(e => `${e.field}: ${e.issue}`).join(' | ')\n }\n }];\n }\n}\n\nconsole.log('\\n✅ VALIDATION PASSED ✅');\n\nif (validation.hasWarnings) {\n console.log('\\n⚠️ Warnings (non-blocking):');\n validation.warnings.forEach((warn, i) => {\n console.log(` ${i+1}. ${warn.field}: ${warn.issue}`);\n });\n}\n\nconsole.log('\\nProceeding to Autotask update...\\n');\n\nreturn [{\n json: {\n ...finalPayload,\n _validationFailed: false,\n _validationWarnings: validation.warnings,\n attemptNumber\n }\n}];" }, "type": "n8n-nodes-base.code", "typeVersion": 2, "position": [ 1792, 848 ], "id": "7414a63c-90f1-4541-ba9a-602cbd98ae84", "name": "NOC Extract & Validate", "onError": "continueRegularOutput" }, { "parameters": { "jsCode": "// Service Desk Code Node - Extract Queue Assignment with Validation + contactID\nconst data = $input.first().json;\n\n// ===== PARENT-CHILD VALIDATION MAP =====\n\nconst VALID_PARENT_CHILD = {\n \"76\": [758, 759, 760, 761, 762, 795, 828, 829],\n \"46\": [332, 335, 341, 345, 373, 541, 542, 543, 576, 577, 578, 579, 580, 581, 582, 583, 584, 585, 586, 587, 588, 589, 590, 591, 592, 593, 639, 640, 641, 642, 643, 644, 685, 687, 688, 708, 709, 710, 712, 713, 715, 737, 739, 740, 750, 766, 767, 768, 797, 798, 799, 800, 801, 803, 805, 811, 817, 818, 819, 820, 827, 833, 834, 835, 836, 837, 842, 843, 850, 851, 861, 864, 867, 868, 869],\n \"59\": [478, 479, 480, 481, 552, 553, 554, 743, 744, 763, 764, 765, 813, 816, 831, 849, 858, 859, 860, 863, 908, 909, 910, 911, 912, 913],\n \"34\": [257, 312, 313, 314, 315, 316, 317, 451, 452, 492, 493, 568, 569, 570, 571, 706, 707, 711, 771, 772, 773, 806, 807, 808, 809, 812, 814, 832, 838, 839, 844, 845, 852, 853, 854, 862],\n \"25\": [222, 244, 245, 246, 247, 260, 263, 358, 359, 548],\n \"31\": [248, 249, 251, 544, 545, 546, 547, 560, 561, 719, 815, 830],\n \"45\": [322, 323, 324, 325, 326, 327, 329, 330, 356, 374, 375, 376, 392, 393, 436, 732, 733, 734, 735, 736, 738, 746, 749, 878],\n \"30\": [401, 555, 556, 557, 558],\n \"63\": [494, 495, 496, 497, 498, 770, 796, 890],\n \"51\": [377, 378, 380, 381, 382, 384, 385, 550, 551, 745, 769, 804, 847],\n \"55\": [522, 526],\n \"42\": [563, 564, 565, 566, 567, 810, 848],\n \"57\": [437, 438, 439, 440, 455, 456, 471, 472, 573, 613, 614, 615, 616, 620, 621, 622, 624, 625, 626, 627, 628, 629, 630, 634, 637, 645, 649, 667, 668, 669, 670, 672, 673, 674, 675, 676, 677, 678, 680, 681, 747, 748, 774, 846, 895, 896, 897, 898, 899, 900, 901, 902, 903, 904],\n \"20\": [], \"21\": [], \"22\": [], \"28\": [], \"43\": [], \"61\": [], \"65\": [], \"75\": [], \"77\": [], \"78\": [], \"79\": [], \"80\": [], \"81\": [], \"83\": [], \"84\": [], \"85\": []\n};\n\nconst ISSUE_TYPE_LABELS = {\n \"76\": \"Active Directory & Accounts\", \"46\": \"Software\", \"59\": \"Security\", \"34\": \"Email\",\n \"25\": \"Networking\", \"31\": \"Hardware\", \"45\": \"Deployment\", \"30\": \"Server\",\n \"63\": \"Remote Access\", \"51\": \"Peripheral Connectivity\", \"55\": \"Human Resources\",\n \"42\": \"Collaboration\", \"57\": \"Datto RMM Monitoring\", \"20\": \"Reactive\", \"21\": \"MAC\",\n \"22\": \"Centralized Services\", \"28\": \"Client Success\", \"43\": \"Office Administration\",\n \"61\": \"Vendor Support\", \"65\": \"Home Support\", \"75\": \"Decommission\",\n \"77\": \"DUO Monitoring\", \"78\": \"Huntress Monitoring\", \"79\": \"M365 Monitoring\",\n \"80\": \"SentinelOne Monitoring\", \"81\": \"Sophos Monitoring\",\n \"83\": \"Blumira Monitoring\", \"84\": \"Technology Alignment\", \"85\": \"Ransomware Monitoring\"\n};\n\n// ===== VALIDATION FUNCTION =====\n\nfunction validateTicketData(data) {\n const errors = [];\n const warnings = [];\n \n console.log('\\n════════════════════════════════════════');\n console.log(' SERVICE DESK VALIDATION');\n console.log('════════════════════════════════════════');\n console.log('Ticket ID:', data.id);\n console.log('Contact ID:', data.contactID);\n console.log('────────────────────────────────────────\\n');\n \n // 1. TITLE VALIDATION\n console.log('1️⃣ Validating Title...');\n if (!data.title || data.title.trim().length < 10) {\n console.log(' ❌ Title too short or missing');\n errors.push({\n field: 'title',\n severity: 'error',\n issue: 'Title is too short or missing (minimum 10 characters)',\n current: data.title,\n instruction: 'Provide a clear, descriptive title that summarizes the issue or request'\n });\n } else {\n const genericTitles = ['untitled', 'new ticket', 'ticket', 'issue', 'request', 'help'];\n const isGeneric = genericTitles.some(g => data.title.toLowerCase().trim() === g);\n \n if (isGeneric) {\n console.log(' ⚠️ Title is generic:', data.title);\n warnings.push({\n field: 'title',\n severity: 'warning',\n issue: 'Title is generic and could be more specific',\n current: data.title\n });\n } else {\n console.log(' ✅ Title OK');\n }\n }\n \n // 2. DESCRIPTION VALIDATION\n console.log('2️⃣ Validating Description...');\n if (!data.description || data.description.trim().length < 30) {\n console.log(' ❌ Description too short or missing');\n errors.push({\n field: 'description',\n severity: 'error',\n issue: 'Description is too short or missing (minimum 30 characters)',\n current: data.description?.substring(0, 100),\n instruction: 'Provide detailed context about the issue or request'\n });\n } else {\n const placeholders = ['no description', 'see title', 'n/a', 'tbd', 'test', 'none'];\n const isPlaceholder = placeholders.some(p => data.description.toLowerCase().trim() === p);\n \n if (isPlaceholder) {\n console.log(' ❌ Description is a placeholder');\n errors.push({\n field: 'description',\n severity: 'error',\n issue: 'Description is a placeholder, not actual content',\n current: data.description,\n instruction: 'Replace with meaningful details about the ticket'\n });\n } else {\n console.log(' ✅ Description OK');\n }\n }\n \n // 3. PARENT-CHILD VALIDATION\n console.log('3️⃣ Validating Parent-Child Relationship...');\n \n const issueType = data.issueType;\n const subIssueType = data.subIssueType;\n \n console.log(' issueType:', issueType);\n console.log(' subIssueType:', subIssueType);\n \n // Both null is OK\n if (!issueType && !subIssueType) {\n console.log(' ✅ Both null - OK');\n }\n // Parent without child is OK\n else if (issueType && !subIssueType) {\n console.log(' ✅ Parent without child - OK');\n }\n // Child without parent is INVALID\n else if (!issueType && subIssueType) {\n console.log(' ❌ SubIssueType without issueType - INVALID');\n errors.push({\n field: 'issueType/subIssueType',\n severity: 'error',\n issue: 'SubIssueType provided without issueType',\n current: { issueType: null, subIssueType: subIssueType },\n instruction: 'Provide both issueType and subIssueType, or set both to null'\n });\n }\n // Both provided - validate relationship\n else if (issueType && subIssueType) {\n const issueTypeKey = String(issueType);\n const subIssueTypeNum = Number(subIssueType);\n \n if (!VALID_PARENT_CHILD[issueTypeKey]) {\n console.log(' ❌ Unknown issueType:', issueType);\n errors.push({\n field: 'issueType',\n severity: 'error',\n issue: `IssueType ${issueType} does not exist`,\n current: issueType,\n instruction: 'Choose a valid issueType from the parent-child relationship map'\n });\n } else {\n const validChildren = VALID_PARENT_CHILD[issueTypeKey];\n \n if (!validChildren.includes(subIssueTypeNum)) {\n console.log(' ❌ INVALID PARENT-CHILD COMBINATION');\n \n // Find correct parent\n let correctParent = null;\n for (const [parent, children] of Object.entries(VALID_PARENT_CHILD)) {\n if (children.includes(subIssueTypeNum)) {\n correctParent = parent;\n break;\n }\n }\n \n if (correctParent) {\n console.log(' ℹ️ SubIssueType', subIssueType, 'belongs to issueType', correctParent, `(${ISSUE_TYPE_LABELS[correctParent]})`);\n errors.push({\n field: 'issueType/subIssueType',\n severity: 'error',\n issue: `SubIssueType ${subIssueType} does not belong to issueType ${issueType}`,\n current: {\n issueType: `${issueType} (${ISSUE_TYPE_LABELS[issueTypeKey]})`,\n subIssueType: subIssueType\n },\n correctParent: {\n issueType: Number(correctParent),\n label: ISSUE_TYPE_LABELS[correctParent],\n subIssueType: subIssueType\n },\n instruction: `SubIssueType ${subIssueType} belongs to issueType ${correctParent} (${ISSUE_TYPE_LABELS[correctParent]}). Change issueType to ${correctParent} to fix this.`,\n suggestion: `Change issueType from ${issueType} to ${correctParent}`\n });\n } else {\n console.log(' ℹ️ SubIssueType', subIssueType, 'does not exist');\n errors.push({\n field: 'subIssueType',\n severity: 'error',\n issue: `SubIssueType ${subIssueType} does not exist in Autotask`,\n current: { issueType: issueType, subIssueType: subIssueType },\n instruction: `Choose a valid subIssueType from issueType ${issueType}'s children`,\n availableChildren: validChildren\n });\n }\n } else {\n console.log(' ✅ Valid parent-child relationship');\n }\n }\n }\n \n // 4. CONTACTID VALIDATION\n console.log('4️⃣ Validating contactID...');\n if (!data.contactID) {\n console.log(' ⚠️ contactID is missing');\n warnings.push({\n field: 'contactID',\n severity: 'warning',\n issue: 'contactID is missing or null',\n current: data.contactID\n });\n } else {\n console.log(' ✅ contactID present:', data.contactID);\n }\n \n console.log('\\n────────────────────────────────────────');\n console.log('Validation Summary:');\n console.log(' Errors:', errors.length);\n console.log(' Warnings:', warnings.length);\n console.log('════════════════════════════════════════\\n');\n \n return {\n isValid: errors.length === 0,\n hasWarnings: warnings.length > 0,\n errorCount: errors.length,\n warningCount: warnings.length,\n errors,\n warnings\n };\n}\n\n// ===== HELPER FUNCTIONS =====\n\n// FIX: Specifically target ```json blocks to avoid matching the plain ``` description block\nfunction extractJsonBlock(aiOutput) {\n if (!aiOutput) return null;\n \n // Match ONLY ```json ... ``` (not plain ``` blocks)\n const match = aiOutput.match(/```json\\s*\\n([\\s\\S]*?)\\n\\s*```/);\n if (match) {\n try {\n const parsed = JSON.parse(match[1].trim());\n console.log('Successfully extracted JSON block:', parsed);\n return parsed;\n } catch (error) {\n console.log('Error parsing JSON block:', error.message);\n console.log('Raw content was:', match[1]);\n }\n }\n \n console.log('No valid ```json block found in AI output');\n return null;\n}\n\nfunction extractQueueFromAI(aiOutput) {\n console.log('Extracting queue assignment from AI output...');\n const fieldIDs = extractJsonBlock(aiOutput);\n if (fieldIDs?.queueID) {\n console.log(`AI recommended queueID: ${fieldIDs.queueID}`);\n return fieldIDs.queueID;\n }\n console.log('No queueID found in AI output, using fallback');\n return null;\n}\n\nfunction getFallbackQueue() {\n console.log('Using fallback queue - Level 1');\n return 29682833;\n}\n\nfunction extractFieldIDs(aiOutput) {\n console.log('Extracting all field IDs from AI output...');\n const fieldIDs = extractJsonBlock(aiOutput);\n if (fieldIDs) return fieldIDs;\n console.log('No field IDs found, returning empty object');\n return {};\n}\n\nfunction extractCorrectedTitle(markdown) {\n if (!markdown || typeof markdown !== 'string') {\n return null;\n }\n \n const titleMatch = markdown?.match(/\\*\\*Corrected Title\\*\\*:\\s*([^\\n]+)/m);\n if (titleMatch) {\n let raw = titleMatch[1].trim();\n const cleaned = raw.replace(/^[\"'🔒🔧]+|[\"'🔒🔧]+$/g, '').trim();\n \n if (cleaned.toLowerCase().includes('no change necessary') || \n cleaned.toLowerCase().includes('no change needed') ||\n cleaned.toLowerCase().includes('current title is') ||\n !cleaned) {\n return null;\n }\n \n return cleaned;\n }\n return null;\n}\n\nfunction extractCorrectedDescription(markdown) {\n if (!markdown || typeof markdown !== 'string') {\n return null;\n }\n \n // Match **Rewritten Description**: followed by a plain ``` block (NOT ```json)\n const codeBlockMatch = markdown?.match(/\\*\\*Rewritten Description\\*\\*:\\s*```(?!json)\\s*\\n?([\\s\\S]*?)```/m);\n if (codeBlockMatch) {\n let content = codeBlockMatch[1].trim();\n \n if (content.toLowerCase().includes('no change necessary') || \n content.toLowerCase().includes('no change needed') ||\n !content) {\n return null;\n }\n \n return content;\n }\n \n const descMatch = markdown?.match(/\\*\\*Rewritten Description\\*\\*:\\s*\\n([\\s\\S]*?)(?=\\n---\\n|### What Was Done Well)/m);\n if (descMatch) {\n let content = descMatch[1].trim();\n \n if (content.toLowerCase().includes('no change necessary') || \n content.toLowerCase().includes('no change needed') ||\n !content) {\n return null;\n }\n \n return content;\n }\n \n return null;\n}\n\n// ===== MAIN PROCESSING =====\n\nconsole.log('Processing Service Desk ticket...');\nconsole.log('Input keys:', Object.keys(data));\n\nconsole.log('DEBUG - Checking ticket ID sources:');\nconsole.log('data.id:', data.id);\nconsole.log('data.ticketId:', data.ticketId);\nconsole.log('data.entityId:', data.entityId);\nconsole.log('data.originalData?.id:', data.originalData?.id);\n\nconsole.log('DEBUG - Checking contactID sources:');\nconsole.log('data.contactID:', data.contactID);\nconsole.log('data.originalData?.contactID:', data.originalData?.contactID);\n\n// Extract AI recommendations\nconst extractedFieldIDs = extractFieldIDs(data.output);\nconst aiQueueID = extractQueueFromAI(data.output);\nconst fallbackQueueID = getFallbackQueue();\n\n// Extract title and description corrections\nconst extractedTitle = extractCorrectedTitle(data.output);\nconst extractedDesc = extractCorrectedDescription(data.output);\n\n// Build final values\nconst finalTitle = (extractedTitle && extractedTitle.trim()) \n ? extractedTitle \n : (data.title || 'Untitled');\n\nconst finalDescription = (extractedDesc && extractedDesc.trim()) \n ? extractedDesc \n : (data.description || 'No description provided');\n\nconst finalQueueID = aiQueueID || fallbackQueueID;\n\n// Determine ticket ID\nlet ticketId = data.id || data.ticketId || data.entityId || data.originalData?.id;\n\nif (!ticketId) {\n // Match both \"Ticket ID: 123456\" and \"**Ticket ID: 123456**\"\n const aiTicketId = data.output?.match(/\\*{0,2}Ticket ID:\\s*(\\d+)\\*{0,2}/)?.[1];\n if (aiTicketId) {\n ticketId = aiTicketId;\n console.log('Using ticket ID extracted from AI output:', ticketId);\n }\n}\n\nconsole.log('DEBUG - Final ticketId determined:', ticketId, 'Type:', typeof ticketId);\n\nif (!ticketId) {\n throw new Error(`No ticket ID found in input data or AI output. Available keys: ${JSON.stringify(Object.keys(data))}`);\n}\n\nconsole.log('✅ Ticket ID confirmed:', ticketId);\n\n// Determine contactID - preserve from input, or use AI extraction\nlet contactID = data.contactID || data.originalData?.contactID || extractedFieldIDs.contactID;\n\nconsole.log('DEBUG - Final contactID determined:', contactID, 'Type:', typeof contactID);\nif (contactID) {\n console.log('✅ Contact ID confirmed:', contactID);\n} else {\n console.log('⚠️ Contact ID is null/missing');\n}\n\n// Build final payload\nconst finalPayload = {\n id: Number(ticketId),\n title: finalTitle,\n description: finalDescription,\n triageNotes: data.output || '',\n ticketType: extractedFieldIDs.ticketType || data.ticketType,\n priority: extractedFieldIDs.priority || data.priority,\n ticketCategory: extractedFieldIDs.ticketCategory || data.ticketCategory,\n issueType: extractedFieldIDs.issueType || data.issueType,\n subIssueType: extractedFieldIDs.subIssueType || data.subIssueType,\n contactID: contactID ? Number(contactID) : null,\n queueID: finalQueueID,\n status: 47\n};\n\nconsole.log('Final payload built:', finalPayload);\n\n// ===== RUN VALIDATION =====\n\nconst validation = validateTicketData(finalPayload);\nconst attemptNumber = data.attemptNumber || 1;\nconst maxAttempts = 2;\n\nif (!validation.isValid) {\n console.log('\\n🚨 VALIDATION FAILED 🚨\\n');\n \n if (attemptNumber < maxAttempts) {\n console.log(`⚠️ Attempt ${attemptNumber}/${maxAttempts} - Flagging for retry\\n`);\n \n validation.errors.forEach((err, i) => {\n console.log(`Error ${i+1} - ${err.field}:`);\n console.log(` ${err.issue}`);\n if (err.correctParent) {\n console.log(` ✓ Correct: issueType ${err.correctParent.issueType} (${err.correctParent.label})`);\n }\n });\n \n return [{\n json: {\n ...finalPayload,\n _validationFailed: true,\n _validationErrors: validation.errors,\n _validationWarnings: validation.warnings,\n attemptNumber: attemptNumber + 1,\n _retryReason: 'validation_failed',\n _errorSummary: validation.errors.map(e => `${e.field}: ${e.issue}`).join(' | ')\n }\n }];\n \n } else {\n console.log('❌ MAX ATTEMPTS REACHED - Stopping\\n');\n \n return [{\n json: {\n ...finalPayload,\n _validationFailed: true,\n _maxAttemptsReached: true,\n _validationErrors: validation.errors,\n _validationWarnings: validation.warnings,\n attemptNumber,\n _errorSummary: validation.errors.map(e => `${e.field}: ${e.issue}`).join(' | ')\n }\n }];\n }\n}\n\nconsole.log('\\n✅ VALIDATION PASSED ✅');\n\nif (validation.hasWarnings) {\n console.log('\\n⚠️ Warnings (non-blocking):');\n validation.warnings.forEach((warn, i) => {\n console.log(` ${i+1}. ${warn.field}: ${warn.issue}`);\n });\n}\n\nconsole.log('\\nProceeding to Autotask update...\\n');\n\nreturn [{\n json: {\n ...finalPayload,\n _validationFailed: false,\n _validationWarnings: validation.warnings,\n attemptNumber\n }\n}];" }, "type": "n8n-nodes-base.code", "typeVersion": 2, "position": [ 1712, 272 ], "id": "34e537e5-587d-4b3f-bb23-e36709d777fe", "name": "Service Desk Extract & Validate", "alwaysOutputData": true, "executeOnce": true, "onError": "continueRegularOutput" }, { "parameters": { "conditions": { "options": { "caseSensitive": true, "leftValue": "", "typeValidation": "loose", "version": 3 }, "conditions": [ { "id": "cafc7c8b-2645-4dba-8989-648813c80542", "leftValue": "=={{ $json.title.toLowerCase().includes('zoom') || $json.description.toLowerCase().includes('zoom') }}", "rightValue": "true", "operator": { "type": "string", "operation": "equals", "name": "filter.operator.equals" } } ], "combinator": "and" }, "looseTypeValidation": true, "options": {} }, "type": "n8n-nodes-base.if", "typeVersion": 2.3, "position": [ 1120, 304 ], "id": "68888907-346c-4323-89fb-6d252dea4add", "name": "Zoom Check" }, { "parameters": { "workflowId": { "__rl": true, "value": "urArwnGMfXgiCGXq", "mode": "list", "cachedResultUrl": "/workflow/urArwnGMfXgiCGXq", "cachedResultName": "Zoom Branch Triage" }, "workflowInputs": { "mappingMode": "defineBelow", "value": {}, "matchingColumns": [], "schema": [], "attemptToConvertTypes": false, "convertFieldsToString": true }, "options": {} }, "type": "n8n-nodes-base.executeWorkflow", "typeVersion": 1.3, "position": [ 1328, 128 ], "id": "6611d5cf-17ff-4191-9707-87c50877bbce", "name": "Call 'Zoom Branch Triage'" }, { "parameters": { "jsCode": "// Fast Track VIP Detection - Service Desk Branch\n// Input: Full ticket object from AI classification with all fields\n// Output: Same ticket object with priority potentially overridden to 11\nconst item = $input.item.json;\nconst contactId = item.contactID; // ← FIXED: Now gets contact ID, not ticket ID\n\n// Complete VIP Contact ID Array - 41 VIPs across 9 companies\nconst vipContacts = [\n // Seubert and Associates (12 VIPs) - Company ID: 29683407\n 31866666, // Celena Brown - Controller\n 31865947, // William Chapman - Sr. VP of Surety\n 31862141, // Brandon Guiliani\n 29689191, // Brian Long - Chairman\n 29689384, // Kristie L Lulich - Director of Commercial Operations\n 31864346, // Tyler Lyster\n 31863748, // Richard Mansfield - COO/CFO\n 31863133, // Brenda Mitaly\n 29689351, // Brandon Mueller - President\n 31868187, // Kris Queen - Construction Account Executive\n 31862955, // Eric Rheam - VP, Benefits Operation\n 31862099, // Jenna Torres - Director of Marketing\n \n // POH+W Architects (4 VIPs) - Company ID: 29683535\n 29786802, // David Howell\n 31862936, // Charles O'Brien III - Principal\n 31862937, // Chuck O'Brien IV\n 29800889, // Loren Wright - Principal\n \n // Hynes Industries (7 VIPs) - Company ID: 29683481\n 31864825, // Ryan Day - Chief Financial Officer\n 31865011, // George Droder - Chief Commercial Officer\n 31865012, // Mike Giambattista - Chief Procurement Officer\n 31866857, // Brian Hegi - Managing Partner\n 31864993, // Robert T. Moer - Chief Operating Officer\n 31864999, // Rick Organ - President and CEO\n 31865783, // George Vujnovic - Chief Engineering & Innovation Officer\n \n // Bridges Health Partners Services, LLC (4 VIPs) - Company ID: 29684723\n 31866375, // Anthony Johnson\n 31866736, // Matt Rubin\n 31863947, // Paul Scherrah\n 31863552, // Robert Zimmerman\n \n // Insurance Restoration Consultants, Inc. (4 VIPs) - Company ID: 29683500\n 29834337, // Lynn Black\n 31863622, // Scott Danko\n 29834335, // Dave Hood - President\n 29834343, // Bob Talarico\n \n // Thoroughbred Construction Group (2 VIPs) - Company ID: 29683701\n 31864563, // Joshua Reinert - Vice-President\n 31864550, // Joseph Restelli - Owner\n \n // Blake Dentistry (2 VIPs) - Company ID: 29683434\n 29685557, // Shane Blake\n 29686473, // Cathleen Hoffman\n \n // TK Plastics Company, Inc. (3 VIPs) - Company ID: 29683704\n 29685703, // Don McCloskey\n 29688517, // Nate Boyle\n 31865203, // Todd Kaercher\n \n // ABC Fire Extinguisher Inc (2 VIPs) - Company ID: 29683274\n 31868248, // Gary D'Loss\n 31868210 // Tyler Fannie\n];\n\n// Check if contact is VIP and override priority if found\nif (vipContacts.includes(parseInt(contactId))) {\n return [{\n json: {\n id: item.id,\n title: item.title,\n description: item.description,\n triageNotes: item.triageNotes,\n ticketType: item.ticketType,\n priority: 11, // Fast Track Priority override\n ticketCategory: item.ticketCategory,\n issueType: item.issueType,\n subIssueType: item.subIssueType,\n contactID: item.contactID, // ← ADDED: Preserve contactID in output\n queueID: item.queueID,\n status: item.status,\n _validationFailed: item._validationFailed,\n _validationWarnings: item._validationWarnings,\n attemptNumber: item.attemptNumber\n }\n }];\n} else {\n // Not VIP - pass through unchanged\n return [{\n json: {\n id: item.id,\n title: item.title,\n description: item.description,\n triageNotes: item.triageNotes,\n ticketType: item.ticketType,\n priority: item.priority, // Keep AI-determined priority\n ticketCategory: item.ticketCategory,\n issueType: item.issueType,\n subIssueType: item.subIssueType,\n contactID: item.contactID, // ← ADDED: Preserve contactID in output\n queueID: item.queueID,\n status: item.status,\n _validationFailed: item._validationFailed,\n _validationWarnings: item._validationWarnings,\n attemptNumber: item.attemptNumber\n }\n }];\n}" }, "type": "n8n-nodes-base.code", "typeVersion": 2, "position": [ 3008, 320 ], "id": "d6ce8391-ef2d-4bf4-b914-a06a2b5151ee", "name": "SD Fast Track Tagger" }, { "parameters": { "jsCode": "// Fast Track VIP Detection - SOC Branch\n// Input: Full ticket object from AI classification with all fields\n// Output: Same ticket object with priority potentially overridden to 11\n\nconst item = $input.item.json;\nconst contactId = item.id; // Adjust if contact ID is in different field\n\n// Complete VIP Contact ID Array - 40 VIPs across 9 companies\nconst vipContacts = [\n // Seubert and Associates (12 VIPs) - Company ID: 29683407\n 31866666, // Celena Brown - Controller\n 31865947, // William Chapman - Sr. VP of Surety\n 31862141, // Brandon Guiliani\n 29689191, // Brian Long - Chairman\n 29689384, // Kristie L Lulich - Director of Commercial Operations\n 31864346, // Tyler Lyster\n 31863748, // Richard Mansfield - COO/CFO\n 31863133, // Brenda Mitaly\n 29689351, // Brandon Mueller - President\n 31868187, // Kris Queen - Construction Account Executive\n 31862955, // Eric Rheam - VP, Benefits Operation\n 31862099, // Jenna Torres - Director of Marketing\n \n // POH+W Architects (4 VIPs) - Company ID: 29683535\n 29786802, // David Howell\n 31862936, // Charles O'Brien III - Principal\n 31862937, // Chuck O'Brien IV\n 29800889, // Loren Wright - Principal\n \n // Hynes Industries (6 VIPs) - Company ID: 29683481\n 31864825, // Ryan Day - Chief Financial Officer\n 31865011, // George Droder - Chief Commercial Officer\n 31865012, // Mike Giambattista - Chief Procurement Officer\n 31866857, // Brian Hegi - Managing Partner\n 31864993, // Robert T. Moer - Chief Operating Officer\n 31864999, // Rick Organ - President and CEO\n 31865783, // George Vujnovic - Chief Engineering & Innovation Officer\n \n // Bridges Health Partners Services, LLC (4 VIPs) - Company ID: 29684723\n 31866375, // Anthony Johnson\n 31866736, // Matt Rubin\n 31863947, // Paul Scherrah\n 31863552, // Robert Zimmerman\n \n // Insurance Restoration Consultants, Inc. (4 VIPs) - Company ID: 29683500\n 29834337, // Lynn Black\n 31863622, // Scott Danko\n 29834335, // Dave Hood - President\n 29834343, // Bob Talarico\n \n // Thoroughbred Construction Group (2 VIPs) - Company ID: 29683701\n 31864563, // Joshua Reinert - Vice-President\n 31864550, // Joseph Restelli - Owner\n \n // Blake Dentistry (2 VIPs) - Company ID: 29683434\n 29685557, // Shane Blake\n 29686473, // Cathleen Hoffman\n \n // TK Plastics Company, Inc. (3 VIPs) - Company ID: 29683704\n 29685703, // Don McCloskey\n 29688517, // Nate Boyle\n 29685008, // Todd Kaercher\n \n // ABC Fire Extinguisher Inc (2 VIPs) - Company ID: 29683274\n 31868248, // Gary D'Loss\n 31868210 // Tyler Fannie\n];\n\n// Check if contact is VIP and override priority if found\nif (vipContacts.includes(parseInt(contactId))) {\n return [{\n json: {\n id: item.id,\n title: item.title,\n description: item.description,\n triageNotes: item.triageNotes,\n ticketType: item.ticketType,\n priority: 11, // Fast Track Priority override\n ticketCategory: item.ticketCategory,\n issueType: item.issueType,\n subIssueType: item.subIssueType,\n queueID: item.queueID,\n status: item.status,\n _validationFailed: item._validationFailed,\n _validationWarnings: item._validationWarnings,\n attemptNumber: item.attemptNumber\n }\n }];\n} else {\n // Not VIP - pass through unchanged\n return [{\n json: {\n id: item.id,\n title: item.title,\n description: item.description,\n triageNotes: item.triageNotes,\n ticketType: item.ticketType,\n priority: item.priority, // Keep AI-determined priority\n ticketCategory: item.ticketCategory,\n issueType: item.issueType,\n subIssueType: item.subIssueType,\n queueID: item.queueID,\n status: item.status,\n _validationFailed: item._validationFailed,\n _validationWarnings: item._validationWarnings,\n attemptNumber: item.attemptNumber\n }\n }];\n}" }, "type": "n8n-nodes-base.code", "typeVersion": 2, "position": [ 3152, 80 ], "id": "98fb6a2f-4348-4bed-8953-abece1170d64", "name": "SOC Fast Track Tagger" }, { "parameters": { "conditions": { "options": { "caseSensitive": true, "leftValue": "", "typeValidation": "strict", "version": 3 }, "conditions": [ { "id": "20e3d0f7-fcd6-4855-b11c-2a9e7019dfa1", "leftValue": "={{ $json.entityData.TicketType }}", "rightValue": "4", "operator": { "type": "string", "operation": "equals", "name": "filter.operator.equals" } } ], "combinator": "and" }, "options": {} }, "type": "n8n-nodes-base.if", "typeVersion": 2.3, "position": [ -32, 576 ], "id": "382e0964-a3aa-4169-8ba6-8fc6d18e440d", "name": "CR check" }, { "parameters": { "resource": "ticket", "operation": "update", "id": "={{ $json.body.Id }}", "fieldsToMap": { "mappingMode": "defineBelow", "value": { "status": "47", "queueID": "29682833", "priority": "8" }, "matchingColumns": [], "schema": [ { "id": "assignedResourceID", "displayName": "Assigned resource ID (Reference: Resource | assignedResourceID)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Addigy API", "value": "30861552", "description": "" }, { "name": "Anthony Bonante", "value": "30861472", "description": "" }, { "name": "API Automations", "value": "30861575", "description": "" }, { "name": "Auto Report", "value": "30861579", "description": "" }, { "name": "Automation WulfSnap", "value": "30861576", "description": "" }, { "name": "Autotask Administrator", "value": "4", "description": "" }, { "name": "Brad Fortney", "value": "30861483", "description": "" }, { "name": "Casey Roush", "value": "30861478", "description": "" }, { "name": "chat test", "value": "30861548", "description": "" }, { "name": "Collin Imler", "value": "30861443", "description": "" }, { "name": "Connect Booster", "value": "30861526", "description": "" }, { "name": "Cory Houck", "value": "30861463", "description": "" }, { "name": "Crewhu Bot", "value": "30861496", "description": "" }, { "name": "Dan Bucci", "value": "29823085", "description": "" }, { "name": "Darrius Jones", "value": "30861543", "description": "" }, { "name": "Dash Board", "value": "30861460", "description": "" }, { "name": "Datto RMM", "value": "30861455", "description": "" }, { "name": "David Bauer", "value": "30861549", "description": "" }, { "name": "Delmar Insights", "value": "30861534", "description": "" }, { "name": "DeskDirector Integrator", "value": "30861501", "description": "" }, { "name": "Development N8N", "value": "30861571", "description": "" }, { "name": "Evan Life", "value": "30861544", "description": "" }, { "name": "Garrett Reihner", "value": "30861570", "description": "" }, { "name": "Gary Hightower", "value": "30861458", "description": "" }, { "name": "Heather Collins", "value": "30861568", "description": "" }, { "name": "Huntress Labs", "value": "30861538", "description": "" }, { "name": "Jake Hammel", "value": "30861450", "description": "" }, { "name": "James Hubbard", "value": "30861536", "description": "" }, { "name": "James Meier", "value": "30861471", "description": "" }, { "name": "Jeremy Johnston", "value": "29682788", "description": "" }, { "name": "John Stvartak", "value": "30861444", "description": "" }, { "name": "Jordan Goff", "value": "30861491", "description": "" }, { "name": "Joshua Mitchell", "value": "30861540", "description": "" }, { "name": "Kayla Lantz", "value": "30861507", "description": "" }, { "name": "Lauren Baczuk", "value": "30861505", "description": "" }, { "name": "Lifecycle Insights", "value": "30861551", "description": "" }, { "name": "Lorentz Hinrichsen", "value": "29683311", "description": "" }, { "name": "Miguel Vasquez", "value": "30861541", "description": "" }, { "name": "MissionControl API", "value": "30861530", "description": "" }, { "name": "n8n api", "value": "30861569", "description": "" }, { "name": "passportal sync", "value": "30861557", "description": "" }, { "name": "Pax8 API", "value": "30861528", "description": "" }, { "name": "Quickbooks Online", "value": "30861532", "description": "" }, { "name": "QuoteWerks Sales", "value": "30861531", "description": "" }, { "name": "Rewst Automation", "value": "30861573", "description": "" }, { "name": "RMM Tool", "value": "29764294", "description": "" }, { "name": "Ryan Day", "value": "30861510", "description": "" }, { "name": "Salesbuildr API", "value": "30861574", "description": "" }, { "name": "Sean Glenn", "value": "30861545", "description": "" }, { "name": "SecureBreachNow API", "value": "30861554", "description": "" }, { "name": "TimeZest API", "value": "30861529", "description": "" }, { "name": "Tom Carlin", "value": "30861456", "description": "" }, { "name": "Tony Feerst", "value": "29775118", "description": "" }, { "name": "Warranty Master", "value": "30861475", "description": "" }, { "name": "Wulf Automation", "value": "30861533", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "assignedResourceRoleID", "displayName": "Assigned resource role ID (Integer | assignedResourceRoleID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "billingCodeID", "displayName": "Billing code ID (Reference: BillingCode | billingCodeID)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Administration Dept Meeting (29792118)", "value": "29792118", "description": "" }, { "name": "Bench Work (29682870)", "value": "29682870", "description": "" }, { "name": "Block Hours (29720332)", "value": "29720332", "description": "" }, { "name": "Business Development (29792079)", "value": "29792079", "description": "" }, { "name": "Change Orders (5)", "value": "5", "description": "" }, { "name": "Client Onboarding (29792114)", "value": "29792114", "description": "" }, { "name": "Client Relations and Sales (29792101)", "value": "29792101", "description": "" }, { "name": "Client Success (29682860)", "value": "29682860", "description": "" }, { "name": "Client Success Dept Meeting (29792121)", "value": "29792121", "description": "" }, { "name": "Client Success Mgmt (Admin) (29792122)", "value": "29792122", "description": "" }, { "name": "Client Supplies (29792125)", "value": "29792125", "description": "" }, { "name": "Co-Managed IT Resource (29792072)", "value": "29792072", "description": "" }, { "name": "Company Morning Huddle (29792098)", "value": "29792098", "description": "" }, { "name": "Consulting (29792132)", "value": "29792132", "description": "" }, { "name": "Cyber Security (29792084)", "value": "29792084", "description": "" }, { "name": "Data Center Cloud (29792087)", "value": "29792087", "description": "" }, { "name": "Datto Cloud (29792096)", "value": "29792096", "description": "" }, { "name": "Discount (-1)", "value": "-1", "description": "" }, { "name": "Discount Non-Taxable (-2)", "value": "-2", "description": "" }, { "name": "Domain Name (29694963)", "value": "29694963", "description": "" }, { "name": "Entertainment Expense (3)", "value": "3", "description": "" }, { "name": "Escalation (29792117)", "value": "29792117", "description": "" }, { "name": "Financial and Accounting (Admin) (29792103)", "value": "29792103", "description": "" }, { "name": "HaaS (29792106)", "value": "29792106", "description": "" }, { "name": "Hardware - Infrastructure (29792094)", "value": "29792094", "description": "" }, { "name": "Hardware (29682871)", "value": "29682871", "description": "" }, { "name": "Hardware (29792065)", "value": "29792065", "description": "" }, { "name": "Holiday (91208)", "value": "91208", "description": "" }, { "name": "Hourly Payroll (29792113)", "value": "29792113", "description": "" }, { "name": "Human Resources (Admin) (29682781)", "value": "29682781", "description": "" }, { "name": "Innovation and Technology (29792112)", "value": "29792112", "description": "" }, { "name": "Inventory Management (29792105)", "value": "29792105", "description": "" }, { "name": "Labor (29682918)", "value": "29682918", "description": "" }, { "name": "Labor (29702246)", "value": "29702246", "description": "" }, { "name": "Labor (29792064)", "value": "29792064", "description": "" }, { "name": "Legal and Compliance (Admin) (29792110)", "value": "29792110", "description": "" }, { "name": "Managed IT & Backup (29792083)", "value": "29792083", "description": "" }, { "name": "Marketing (Admin) (29792100)", "value": "29792100", "description": "" }, { "name": "Marketing & Branding (29792109)", "value": "29792109", "description": "" }, { "name": "Mileage (2)", "value": "2", "description": "" }, { "name": "Milestone (29682913)", "value": "29682913", "description": "" }, { "name": "Miscellaneous (29682783)", "value": "29682783", "description": "" }, { "name": "Monitoring Services (29683277)", "value": "29683277", "description": "" }, { "name": "New Business Development (Admin) (29792099)", "value": "29792099", "description": "" }, { "name": "Nextiva Services (29792068)", "value": "29792068", "description": "" }, { "name": "NOC Support (29792060)", "value": "29792060", "description": "" }, { "name": "Non-Taxable Products (29682839)", "value": "29682839", "description": "" }, { "name": "O365 Cloud (29792085)", "value": "29792085", "description": "" }, { "name": "O365 Support (29792082)", "value": "29792082", "description": "" }, { "name": "Office Administration (29682808)", "value": "29682808", "description": "" }, { "name": "Office Administration (29792102)", "value": "29792102", "description": "" }, { "name": "On-site Support (29780565)", "value": "29780565", "description": "" }, { "name": "Operations Management (29792077)", "value": "29792077", "description": "" }, { "name": "Out of Scope (29792071)", "value": "29792071", "description": "" }, { "name": "Parking (29765131)", "value": "29765131", "description": "" }, { "name": "Peer Group(s) (29792115)", "value": "29792115", "description": "" }, { "name": "Personal Development and Leadership (29792111)", "value": "29792111", "description": "" }, { "name": "Personal Time (91209)", "value": "91209", "description": "" }, { "name": "Post Sale (29792075)", "value": "29792075", "description": "" }, { "name": "Pro Services Dept Meeting (29792123)", "value": "29792123", "description": "" }, { "name": "Pro Services Mgmt (Admin) (29792124)", "value": "29792124", "description": "" }, { "name": "Procurement & Fulfillment (Admin) (29792104)", "value": "29792104", "description": "" }, { "name": "Professional Service - PC Setup (29792130)", "value": "29792130", "description": "" }, { "name": "Project Labor (29792088)", "value": "29792088", "description": "" }, { "name": "Projects (29682915)", "value": "29682915", "description": "" }, { "name": "Quote Manager Temp (29792107)", "value": "29792107", "description": "" }, { "name": "Recurring Services (29682912)", "value": "29682912", "description": "" }, { "name": "Reimbursed Expense (29792093)", "value": "29792093", "description": "" }, { "name": "Remote Support (29780571)", "value": "29780571", "description": "" }, { "name": "Retainer Purchase (29720333)", "value": "29720333", "description": "" }, { "name": "RMA (29792074)", "value": "29792074", "description": "" }, { "name": "Sales (29792131)", "value": "29792131", "description": "" }, { "name": "Service Delivery Dept Meeting (29792119)", "value": "29792119", "description": "" }, { "name": "Service Delivery Mgmt (Admin) (29792120)", "value": "29792120", "description": "" }, { "name": "Shipping & Handling (29739200)", "value": "29739200", "description": "" }, { "name": "Sick Time (91207)", "value": "91207", "description": "" }, { "name": "SOC (Admin) (29792127)", "value": "29792127", "description": "" }, { "name": "SOC Support (29792081)", "value": "29792081", "description": "" }, { "name": "Software (29682872)", "value": "29682872", "description": "" }, { "name": "Software (29792066)", "value": "29792066", "description": "" }, { "name": "Software Licenses (29684861)", "value": "29684861", "description": "" }, { "name": "SubContractor (29792092)", "value": "29792092", "description": "" }, { "name": "Subscription (29682919)", "value": "29682919", "description": "" }, { "name": "System Build & Config (29792129)", "value": "29792129", "description": "" }, { "name": "T&M Labor (29792089)", "value": "29792089", "description": "" }, { "name": "Tasks (29682916)", "value": "29682916", "description": "" }, { "name": "Taxable Products (29682840)", "value": "29682840", "description": "" }, { "name": "Taxes from Autotask (29682914)", "value": "29682914", "description": "" }, { "name": "Ticket Purchase (29720334)", "value": "29720334", "description": "" }, { "name": "Ticket Triage (29792116)", "value": "29792116", "description": "" }, { "name": "Tickets (29682917)", "value": "29682917", "description": "" }, { "name": "Training (29792126)", "value": "29792126", "description": "" }, { "name": "Travel Charge (29682782)", "value": "29682782", "description": "" }, { "name": "Travel Time (27192)", "value": "27192", "description": "" }, { "name": "Travel Time (29792067)", "value": "29792067", "description": "" }, { "name": "Vacation (91206)", "value": "91206", "description": "" }, { "name": "VAR Cloud Tax Exempt (29792128)", "value": "29792128", "description": "" }, { "name": "VAR Cloud Taxable (29792086)", "value": "29792086", "description": "" }, { "name": "Web Hosting (29792073)", "value": "29792073", "description": "" }, { "name": "Workstation (29695008)", "value": "29695008", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "changeApprovalBoard", "displayName": "Change approval board (Picklist | changeApprovalBoard)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Software Request CAB", "value": "3", "description": "" }, { "name": "Wulf CAB", "value": "1", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "changeApprovalStatus", "displayName": "Change approval status (Picklist | changeApprovalStatus)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Approved", "value": "5", "description": "" }, { "name": "Assigned", "value": "2", "description": "" }, { "name": "Not Assigned", "value": "1", "description": "" }, { "name": "Partially Approved", "value": "4", "description": "" }, { "name": "Rejected", "value": "6", "description": "" }, { "name": "Requested", "value": "3", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "changeApprovalType", "displayName": "Change approval type (Picklist | changeApprovalType)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "All approvers must approve", "value": "1", "description": "" }, { "name": "One approver must approve", "value": "2", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "changeInfoField1", "displayName": "Change info field1 (String | changeInfoField1)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "changeInfoField2", "displayName": "Change info field2 (String | changeInfoField2)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "changeInfoField3", "displayName": "Change info field3 (String | changeInfoField3)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "changeInfoField4", "displayName": "Change info field4 (String | changeInfoField4)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "changeInfoField5", "displayName": "Change info field5 (String | changeInfoField5)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "companyID", "displayName": "Company ID (Integer | companyID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "companyLocationID", "displayName": "Company location ID (Integer | companyLocationID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "configurationItemID", "displayName": "Configuration item ID (Integer | configurationItemID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "contactID", "displayName": "Contact ID (Integer | contactID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "contractID", "displayName": "Contract ID (Integer | contractID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "contractServiceBundleID", "displayName": "Contract service bundle ID (Long | contractServiceBundleID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "contractServiceID", "displayName": "Contract service ID (Long | contractServiceID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "createdByContactID", "displayName": "Created by contact ID (Integer | createdByContactID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "description", "displayName": "Description (String | description)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "dueDateTime", "displayName": "Due date time (Datetime | dueDateTime)", "type": "dateTime", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "estimatedHours", "displayName": "Estimated hours (Decimal | estimatedHours)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "externalID", "displayName": "External ID (String | externalID)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "issueType", "displayName": "Issue type (Picklist | issueType)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "24-Hour Emergency Support", "value": "36", "description": "" }, { "name": "Active Directory & Accounts", "value": "76", "description": "" }, { "name": "Backups", "value": "38", "description": "" }, { "name": "Blumira Monitoring", "value": "83", "description": "" }, { "name": "Centralized Services", "value": "22", "description": "" }, { "name": "Client Success", "value": "28", "description": "" }, { "name": "Collaboration (Video, Voice & Chat)", "value": "42", "description": "" }, { "name": "Datto RMM Monitoring", "value": "57", "description": "" }, { "name": "Decommission", "value": "75", "description": "" }, { "name": "Deployment", "value": "45", "description": "" }, { "name": "DUO Monitoring", "value": "77", "description": "" }, { "name": "Email", "value": "34", "description": "" }, { "name": "Epicor", "value": "66", "description": "" }, { "name": "Hardware", "value": "31", "description": "" }, { "name": "Home Support", "value": "65", "description": "" }, { "name": "Human Resources", "value": "55", "description": "" }, { "name": "Huntress Monitoring", "value": "78", "description": "" }, { "name": "M365 Monitoring", "value": "79", "description": "" }, { "name": "MAC", "value": "21", "description": "" }, { "name": "MES", "value": "68", "description": "" }, { "name": "MES AccPac", "value": "72", "description": "" }, { "name": "MES Data Collection", "value": "71", "description": "" }, { "name": "MES IT Department", "value": "74", "description": "" }, { "name": "MES PowerBI", "value": "73", "description": "" }, { "name": "MES Preactor", "value": "70", "description": "" }, { "name": "MES Server", "value": "69", "description": "" }, { "name": "Networking", "value": "25", "description": "" }, { "name": "Office Administration", "value": "43", "description": "" }, { "name": "Old Sales", "value": "26", "description": "" }, { "name": "Peripheral Connectivity", "value": "51", "description": "" }, { "name": "Post Sales", "value": "87", "description": "" }, { "name": "Ransomware Monitoring", "value": "85", "description": "" }, { "name": "Reactive", "value": "20", "description": "" }, { "name": "Remote Access", "value": "63", "description": "" }, { "name": "Sales", "value": "86", "description": "" }, { "name": "Security", "value": "59", "description": "" }, { "name": "SentinelOne Monitoring", "value": "80", "description": "" }, { "name": "Server", "value": "30", "description": "" }, { "name": "Software", "value": "46", "description": "" }, { "name": "Sophos Monitoring", "value": "81", "description": "" }, { "name": "Technology Alignment", "value": "84", "description": "" }, { "name": "Thrasher Internal", "value": "67", "description": "" }, { "name": "Vendor Support", "value": "61", "description": "" }, { "name": "Zoom Monitoring", "value": "82", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "isVisibleToComanaged", "displayName": "Is visible to comanaged (Boolean | isVisibleToComanaged)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Yes", "value": "true", "description": "True/Yes" }, { "name": "No", "value": "false", "description": "False/No" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "monitorID", "displayName": "Monitor ID (Long | monitorID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "monitorTypeID", "displayName": "Monitor type ID (Picklist | monitorTypeID)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "AntivirusMonitor", "value": "23", "description": "" }, { "name": "BackupMonitor", "value": "13", "description": "" }, { "name": "ComponentMonitor", "value": "4", "description": "" }, { "name": "CPUMonitor", "value": "2", "description": "" }, { "name": "DiskUsageMonitor", "value": "10", "description": "" }, { "name": "EventLogMonitor", "value": "7", "description": "" }, { "name": "FileFolderSizeMonitor", "value": "11", "description": "" }, { "name": "HardwareMonitor", "value": "19", "description": "" }, { "name": "MemoryMonitor", "value": "3", "description": "" }, { "name": "NetworkMonitor", "value": "16", "description": "" }, { "name": "NetworkOfflineMonitor", "value": "17", "description": "" }, { "name": "OnlineStatusMonitor", "value": "1", "description": "" }, { "name": "PatchMonitor", "value": "20", "description": "" }, { "name": "PrinterStatusMonitor", "value": "14", "description": "" }, { "name": "ProcessMonitor", "value": "5", "description": "" }, { "name": "RansomwareMonitor", "value": "24", "description": "" }, { "name": "SecurityCenterMonitor", "value": "9", "description": "" }, { "name": "SecurityManagementMonitor", "value": "12", "description": "" }, { "name": "ServiceMonitor", "value": "6", "description": "" }, { "name": "SnmpMonitor", "value": "15", "description": "" }, { "name": "SoftwareMonitor", "value": "8", "description": "" }, { "name": "TemperatureSensorMonitor", "value": "18", "description": "" }, { "name": "ThreatDetection", "value": "25", "description": "" }, { "name": "WindowsPerformanceMonitor", "value": "21", "description": "" }, { "name": "WmiMonitor", "value": "22", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "opportunityID", "displayName": "Opportunity ID (Integer | opportunityID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "organizationalLevelAssociationID", "displayName": "Organizational level association ID (Integer | organizationalLevelAssociationID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "priority", "displayName": "Priority (Picklist | priority)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Critical", "value": "4", "description": "" }, { "name": "Fast Track", "value": "11", "description": "" }, { "name": "High", "value": "6", "description": "" }, { "name": "Installation", "value": "10", "description": "" }, { "name": "Major Service", "value": "9", "description": "" }, { "name": "Medium", "value": "2", "description": "" }, { "name": "Minor Service", "value": "8", "description": "" }, { "name": "Security Event", "value": "7", "description": "" }, { "name": "Standard", "value": "3", "description": "" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "problemTicketId", "displayName": "Problem ticket id (Integer | problemTicketId)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "projectID", "displayName": "Project ID (Integer | projectID)", "type": "number", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "purchaseOrderNumber", "displayName": "Purchase order number (String | purchaseOrderNumber)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "queueID", "displayName": "Queue ID (Picklist | queueID)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Client Success", "value": "29749490", "description": "" }, { "name": "Client Triage", "value": "5", "description": "" }, { "name": "Deployment", "value": "29853700", "description": "" }, { "name": "Follow Up", "value": "29853695", "description": "" }, { "name": "Glunt Help Desk", "value": "29853714", "description": "" }, { "name": "IT Operations", "value": "29853701", "description": "" }, { "name": "LEC Network Operations Center", "value": "29853754", "description": "" }, { "name": "LEC Security Operations Center", "value": "29853755", "description": "" }, { "name": "LEC Service Desk", "value": "29853753", "description": "" }, { "name": "Level 1 Support", "value": "29682833", "description": "" }, { "name": "Level 2 Support", "value": "29682969", "description": "" }, { "name": "Level 3 Support", "value": "29703428", "description": "" }, { "name": "Mission Control", "value": "29853699", "description": "" }, { "name": "Monitoring Alert", "value": "8", "description": "" }, { "name": "Operations Triage", "value": "29832283", "description": "" }, { "name": "PER Network Operations Center", "value": "29853751", "description": "" }, { "name": "PER Security Operations Center", "value": "29853752", "description": "" }, { "name": "PER Service Desk", "value": "29853750", "description": "" }, { "name": "Post Sale", "value": "6", "description": "" }, { "name": "Premier Automation Help Desk", "value": "29853706", "description": "" }, { "name": "Project Delivery", "value": "29853698", "description": "" }, { "name": "Purchasing", "value": "29853727", "description": "" }, { "name": "Sales", "value": "29853766", "description": "" }, { "name": "Subcontractor", "value": "29853741", "description": "" }, { "name": "TaskFire", "value": "29780304", "description": "" }, { "name": "TNT Pizza Help Desk", "value": "29853719", "description": "" }, { "name": "Trivium Packaging - Help Desk", "value": "29853697", "description": "" }, { "name": "Trivium Packaging - MES", "value": "29853731", "description": "" }, { "name": "TTG Change Mgmt", "value": "29853740", "description": "" }, { "name": "TTG Finance", "value": "29853723", "description": "" }, { "name": "TTG Help Desk", "value": "29853710", "description": "" }, { "name": "TTG Machines", "value": "29853720", "description": "" }, { "name": "TTG NetOps", "value": "29853721", "description": "" }, { "name": "TTG New User Access", "value": "29853728", "description": "" }, { "name": "TTG Remote", "value": "29853726", "description": "" }, { "name": "TTG Safety", "value": "29853724", "description": "" }, { "name": "TTG Security", "value": "29853738", "description": "" }, { "name": "TTG Term User Access", "value": "29853729", "description": "" }, { "name": "VCF Network Operations", "value": "29853757", "description": "" }, { "name": "VCF Security Operations Center", "value": "29853758", "description": "" }, { "name": "VCF Service Desk", "value": "29853756", "description": "" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "resolution", "displayName": "Resolution (String | resolution)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "rmaStatus", "displayName": "Rma status (Picklist | rmaStatus)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Authorized", "value": "2", "description": "" }, { "name": "Denied", "value": "3", "description": "" }, { "name": "Finished", "value": "9", "description": "" }, { "name": "Finished (Not Returned)", "value": "10", "description": "" }, { "name": "In Progress", "value": "8", "description": "" }, { "name": "On Hold", "value": "5", "description": "" }, { "name": "Open", "value": "4", "description": "" }, { "name": "Requested", "value": "1", "description": "" }, { "name": "Waiting for Customer", "value": "7", "description": "" }, { "name": "Withdrawn", "value": "6", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "rmaType", "displayName": "Rma type (Picklist | rmaType)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Repair", "value": "2", "description": "" }, { "name": "Replace", "value": "3", "description": "" }, { "name": "Return", "value": "1", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "serviceLevelAgreementID", "displayName": "Service level agreement ID (Picklist | serviceLevelAgreementID)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Default", "value": "1", "description": "" }, { "name": "NOC/SOC SLA", "value": "11", "description": "" }, { "name": "Post Sale SLA", "value": "16", "description": "" }, { "name": "Sales SLA", "value": "12", "description": "" }, { "name": "Service Desk - Standard SLA", "value": "9", "description": "" }, { "name": "Thrasher HD SLA", "value": "14", "description": "" }, { "name": "Wulf Response 24x7x365", "value": "10", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "source", "displayName": "Source (Picklist | source)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Autotask Portal", "value": "5", "description": "" }, { "name": "AWS Cloud Watch (email)", "value": "37", "description": "" }, { "name": "Blumira SIEM", "value": "36", "description": "" }, { "name": "Client Portal", "value": "-1", "description": "" }, { "name": "Client Success Team", "value": "30", "description": "" }, { "name": "Datto RMM (API)", "value": "8", "description": "" }, { "name": "Desk Director Portal", "value": "21", "description": "" }, { "name": "DUO (API)", "value": "32", "description": "" }, { "name": "Email", "value": "4", "description": "" }, { "name": "Huntress (email)", "value": "31", "description": "" }, { "name": "In Person/Onsite", "value": "6", "description": "" }, { "name": "Insourced", "value": "-2", "description": "" }, { "name": "Lifecyle", "value": "40", "description": "" }, { "name": "M365 (email)", "value": "33", "description": "" }, { "name": "Other", "value": "1", "description": "" }, { "name": "Phone", "value": "2", "description": "" }, { "name": "Recurring", "value": "22", "description": "" }, { "name": "RMM Tool", "value": "17", "description": "" }, { "name": "RocketCyber Alert", "value": "24", "description": "" }, { "name": "SentinelOne (email)", "value": "34", "description": "" }, { "name": "Service Delivery Team", "value": "38", "description": "" }, { "name": "Service Escalation", "value": "39", "description": "" }, { "name": "Sophos (email)", "value": "35", "description": "" }, { "name": "Text Message", "value": "18", "description": "" }, { "name": "Zoom (email)", "value": "27", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "status", "displayName": "Status (Picklist | status)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Burn-in In Progress", "value": "46", "description": "" }, { "name": "Client Non-Responsive", "value": "37", "description": "" }, { "name": "Complete", "value": "5", "description": "" }, { "name": "Dispatched", "value": "10", "description": "" }, { "name": "End User Note Added", "value": "19", "description": "" }, { "name": "Escalate", "value": "11", "description": "" }, { "name": "Escalate to CSM", "value": "61", "description": "" }, { "name": "Escalate to Customer HD", "value": "62", "description": "" }, { "name": "Escalate to MC", "value": "48", "description": "" }, { "name": "Escalate to Wulf", "value": "57", "description": "" }, { "name": "Huddle Review", "value": "55", "description": "" }, { "name": "In Progress", "value": "8", "description": "" }, { "name": "Internal Note Added", "value": "66", "description": "" }, { "name": "Loading Customer Config", "value": "60", "description": "" }, { "name": "Need to Order/Fulfill", "value": "59", "description": "" }, { "name": "New", "value": "1", "description": "Default value" }, { "name": "On Hold", "value": "25", "description": "" }, { "name": "Outsourced", "value": "69", "description": "" }, { "name": "Pending Next Site Visit", "value": "45", "description": "" }, { "name": "Pre-Pick Order", "value": "58", "description": "" }, { "name": "Quote Delivered", "value": "67", "description": "" }, { "name": "Ready for Customer Config", "value": "68", "description": "" }, { "name": "Ready to Deploy", "value": "15", "description": "" }, { "name": "Reconcile Billing", "value": "51", "description": "" }, { "name": "Reopened", "value": "16", "description": "" }, { "name": "Resolution Plan", "value": "27", "description": "" }, { "name": "Resolved ", "value": "54", "description": "" }, { "name": "Resource Assigned", "value": "14", "description": "" }, { "name": "Resource Requested", "value": "47", "description": "" }, { "name": "Service Call Scheduled", "value": "30", "description": "" }, { "name": "Tracking Shipment", "value": "56", "description": "" }, { "name": "Waiting Approval", "value": "13", "description": "" }, { "name": "Waiting Customer", "value": "7", "description": "" }, { "name": "Waiting Materials", "value": "9", "description": "" }, { "name": "Waiting Procurement", "value": "65", "description": "" }, { "name": "Waiting Project/Ticket", "value": "71", "description": "" }, { "name": "Waiting Quote Acceptance", "value": "70", "description": "" }, { "name": "Waiting Trivium Employee", "value": "64", "description": "" }, { "name": "Waiting Vendor", "value": "12", "description": "" }, { "name": "Waiting Verification", "value": "21", "description": "" } ], "canBeUsedToMatch": false, "removed": false }, { "id": "subIssueType", "displayName": "Sub issue type (Picklist | subIssueType)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "2FA Setup", "value": "860", "description": "" }, { "name": "365 License Add", "value": "840", "description": "" }, { "name": "365 License Remove", "value": "841", "description": "" }, { "name": "365 License Request", "value": "829", "description": "" }, { "name": "401K", "value": "426", "description": "" }, { "name": "Abacus", "value": "539", "description": "" }, { "name": "Abacus", "value": "593", "description": "" }, { "name": "Access Point", "value": "724", "description": "" }, { "name": "Accessories", "value": "237", "description": "" }, { "name": "Account Compromised", "value": "315", "description": "" }, { "name": "Account Lockout", "value": "775", "description": "" }, { "name": "Active Directory", "value": "158", "description": "" }, { "name": "Active Directory", "value": "369", "description": "" }, { "name": "AD account lockout", "value": "795", "description": "" }, { "name": "Add", "value": "418", "description": "" }, { "name": "Add New User", "value": "522", "description": "" }, { "name": "Add User/Line", "value": "413", "description": "" }, { "name": "Adobe Product(s)", "value": "541", "description": "" }, { "name": "Advanced Threat Protection Drop Ale", "value": "786", "description": "" }, { "name": "Agent disabled", "value": "788", "description": "" }, { "name": "AMS 360", "value": "767", "description": "" }, { "name": "Android App Issue", "value": "421", "description": "" }, { "name": "AntiVirus (Not Wulf Managed)", "value": "318", "description": "" }, { "name": "Appgate", "value": "890", "description": "" }, { "name": "Apple Server", "value": "728", "description": "" }, { "name": "Apple Workstation", "value": "727", "description": "" }, { "name": "Apple Workstation", "value": "732", "description": "" }, { "name": "Ardagh Help Desk", "value": "520", "description": "" }, { "name": "Aruba 2530/40 EOL", "value": "885", "description": "" }, { "name": "Audio", "value": "372", "description": "" }, { "name": "Audio", "value": "804", "description": "" }, { "name": "Audio Device Disconnected", "value": "782", "description": "" }, { "name": "Audio Visual", "value": "825", "description": "" }, { "name": "Auto-complete", "value": "569", "description": "" }, { "name": "AutoCAD", "value": "389", "description": "" }, { "name": "AutoCAD", "value": "532", "description": "" }, { "name": "AutoCAD", "value": "581", "description": "" }, { "name": "Autotask PSA", "value": "687", "description": "" }, { "name": "Auvik", "value": "573", "description": "" }, { "name": "Auvik", "value": "696", "description": "" }, { "name": "Auvik Collector Disconnected", "value": "680", "description": "" }, { "name": "Backup: Veeam Agent for Microsoft Windows", "value": "637", "description": "" }, { "name": "Backup: Veeam Backup & Replication", "value": "634", "description": "" }, { "name": "BAQ", "value": "509", "description": "" }, { "name": "BarTender", "value": "712", "description": "" }, { "name": "Battery Replace Indicator", "value": "287", "description": "" }, { "name": "Battery Status", "value": "285", "description": "" }, { "name": "Billing", "value": "309", "description": "" }, { "name": "BitLocker", "value": "764", "description": "" }, { "name": "Bitwarden", "value": "851", "description": "" }, { "name": "Bitwarden setup", "value": "849", "description": "" }, { "name": "Blackberry", "value": "105", "description": "" }, { "name": "Bluebeam", "value": "534", "description": "" }, { "name": "BlueBeam", "value": "579", "description": "" }, { "name": "Blumira", "value": "904", "description": "" }, { "name": "Blumira", "value": "908", "description": "" }, { "name": "Breach", "value": "553", "description": "" }, { "name": "Brightsign", "value": "843", "description": "" }, { "name": "Budget Planning", "value": "930", "description": "" }, { "name": "Bulk Order", "value": "918", "description": "" }, { "name": "Bypass Enabled", "value": "776", "description": "" }, { "name": "Cables & Parts", "value": "361", "description": "" }, { "name": "Calendar Permissions", "value": "571", "description": "" }, { "name": "CallTower", "value": "564", "description": "" }, { "name": "Capacity Expansion", "value": "923", "description": "" }, { "name": "Carrier Websites", "value": "273", "description": "" }, { "name": "Cell Phone", "value": "735", "description": "" }, { "name": "Change management", "value": "450", "description": "" }, { "name": "Change Reqeust", "value": "609", "description": "" }, { "name": "Change Request", "value": "514", "description": "" }, { "name": "Change Request", "value": "599", "description": "" }, { "name": "Change Request", "value": "602", "description": "" }, { "name": "Change Request", "value": "604", "description": "" }, { "name": "Change Request", "value": "605", "description": "" }, { "name": "Change Request", "value": "612", "description": "" }, { "name": "Chirotouch", "value": "293", "description": "" }, { "name": "Chirotouch", "value": "639", "description": "" }, { "name": "Chrome", "value": "542", "description": "" }, { "name": "Circuit", "value": "126", "description": "" }, { "name": "Citrix Share File", "value": "335", "description": "" }, { "name": "Client Audit", "value": "238", "description": "" }, { "name": "Client Budgeting", "value": "879", "description": "" }, { "name": "Client Business Review", "value": "239", "description": "" }, { "name": "Client Consultation Service", "value": "892", "description": "" }, { "name": "Client Offboarding", "value": "304", "description": "" }, { "name": "Client Onboarding", "value": "303", "description": "" }, { "name": "Client Request for Order", "value": "887", "description": "" }, { "name": "Client Request for Quote", "value": "886", "description": "" }, { "name": "Client Service Request", "value": "880", "description": "" }, { "name": "Client Technology Alignment Review", "value": "891", "description": "" }, { "name": "CloudRadial SaaS", "value": "740", "description": "" }, { "name": "Compromised Account", "value": "552", "description": "" }, { "name": "Conditional Access Policy", "value": "859", "description": "" }, { "name": "Conest", "value": "861", "description": "" }, { "name": "Conferencing Equipment Other", "value": "567", "description": "" }, { "name": "ConnectWise Control", "value": "497", "description": "" }, { "name": "Controller (iPad)", "value": "779", "description": "" }, { "name": "Cornerstone", "value": "292", "description": "" }, { "name": "Cornerstone", "value": "640", "description": "" }, { "name": "Counterpoint", "value": "643", "description": "" }, { "name": "CPU Fan Status", "value": "281", "description": "" }, { "name": "CPU Performance", "value": "439", "description": "" }, { "name": "Creo", "value": "834", "description": "" }, { "name": "Customer Specific", "value": "116", "description": "" }, { "name": "DarkWeb ID", "value": "697", "description": "" }, { "name": "Dash", "value": "713", "description": "" }, { "name": "Dashboard", "value": "511", "description": "" }, { "name": "Datto Managed Power", "value": "741", "description": "" }, { "name": "Datto RMM", "value": "688", "description": "" }, { "name": "Datto Work Place", "value": "341", "description": "" }, { "name": "Decommission", "value": "719", "description": "" }, { "name": "Decommission Workstation", "value": "718", "description": "" }, { "name": "Deltek", "value": "535", "description": "" }, { "name": "Deltek", "value": "584", "description": "" }, { "name": "Dentrix", "value": "817", "description": "" }, { "name": "Deployment", "value": "521", "description": "" }, { "name": "Desk Director", "value": "811", "description": "" }, { "name": "Desktop", "value": "248", "description": "" }, { "name": "Desktop - Outlook", "value": "451", "description": "" }, { "name": "Desktop App Issue", "value": "416", "description": "" }, { "name": "Desktop App. (Non Standard)", "value": "225", "description": "" }, { "name": "Desktop App. (Standard)", "value": "160", "description": "" }, { "name": "Desktop App. (Standard)", "value": "226", "description": "" }, { "name": "Desktop/Laptop", "value": "932", "description": "" }, { "name": "DHCP", "value": "162", "description": "" }, { "name": "Disk usage", "value": "438", "description": "" }, { "name": "Display", "value": "745", "description": "" }, { "name": "Distributed File System Replication is Degraded", "value": "675", "description": "" }, { "name": "Distribution Group", "value": "771", "description": "" }, { "name": "DMARC - SPF/DKIM", "value": "714", "description": "" }, { "name": "DNS", "value": "135", "description": "" }, { "name": "DNS", "value": "163", "description": "" }, { "name": "Docking Station", "value": "769", "description": "" }, { "name": "Domain Controller Monitoring", "value": "614", "description": "" }, { "name": "Domain Names", "value": "572", "description": "" }, { "name": "Drive Mappings", "value": "761", "description": "" }, { "name": "DTR (TMM)", "value": "708", "description": "" }, { "name": "DUO Enrollment", "value": "813", "description": "" }, { "name": "DUO Lockout", "value": "758", "description": "" }, { "name": "DUO MFA", "value": "883", "description": "" }, { "name": "Duplicate", "value": "211", "description": "" }, { "name": "DynDNS", "value": "699", "description": "" }, { "name": "Ebonds - Zapier", "value": "869", "description": "" }, { "name": "Ebonds - Gravity Forms", "value": "867", "description": "" }, { "name": "Ebonds - Sharepoint", "value": "868", "description": "" }, { "name": "eDiscovery", "value": "711", "description": "" }, { "name": "Edit User/Line", "value": "415", "description": "" }, { "name": "Egnyte", "value": "766", "description": "" }, { "name": "Elevate Permissions", "value": "765", "description": "" }, { "name": "Email", "value": "118", "description": "" }, { "name": "Email", "value": "122", "description": "" }, { "name": "Email Signatures", "value": "568", "description": "" }, { "name": "Emergency Replacement", "value": "924", "description": "" }, { "name": "Encryption", "value": "113", "description": "" }, { "name": "End of Life Replacement", "value": "925", "description": "" }, { "name": "Enom", "value": "698", "description": "" }, { "name": "Environmental", "value": "472", "description": "" }, { "name": "Epicor", "value": "587", "description": "" }, { "name": "Evaluation", "value": "546", "description": "" }, { "name": "Event logs", "value": "437", "description": "" }, { "name": "Exal MES Related", "value": "259", "description": "" }, { "name": "Exchange", "value": "109", "description": "" }, { "name": "Expansion Opportunity", "value": "927", "description": "" }, { "name": "Failure - Out of Warranty", "value": "544", "description": "" }, { "name": "Failure - Under Warranty", "value": "545", "description": "" }, { "name": "False Alert", "value": "212", "description": "" }, { "name": "Fax", "value": "847", "description": "" }, { "name": "Fax & vFax", "value": "133", "description": "" }, { "name": "Fax & vFax", "value": "503", "description": "" }, { "name": "Fiix", "value": "715", "description": "" }, { "name": "File Permissions", "value": "760", "description": "" }, { "name": "FileZilla", "value": "820", "description": "" }, { "name": "FireFox", "value": "543", "description": "" }, { "name": "Firewall", "value": "124", "description": "" }, { "name": "Firewall", "value": "166", "description": "" }, { "name": "Firewall", "value": "198", "description": "" }, { "name": "Firewall", "value": "244", "description": "" }, { "name": "Firewall", "value": "324", "description": "" }, { "name": "Firewall", "value": "445", "description": "" }, { "name": "Firewall", "value": "721", "description": "" }, { "name": "Firmware", "value": "210", "description": "" }, { "name": "Firmware", "value": "235", "description": "" }, { "name": "Forward Setup", "value": "862", "description": "" }, { "name": "Foundation", "value": "641", "description": "" }, { "name": "FoxPro", "value": "750", "description": "" }, { "name": "Full Disk Encryption", "value": "111", "description": "" }, { "name": "General", "value": "117", "description": "" }, { "name": "GPO", "value": "371", "description": "" }, { "name": "Group Policy", "value": "167", "description": "" }, { "name": "Group Policy", "value": "398", "description": "" }, { "name": "HaaS (Lifecycle)", "value": "856", "description": "" }, { "name": "HaaS (New)", "value": "857", "description": "" }, { "name": "Handset Issue", "value": "422", "description": "" }, { "name": "Hardware", "value": "119", "description": "" }, { "name": "Hardware", "value": "423", "description": "" }, { "name": "Hardware", "value": "556", "description": "" }, { "name": "Hardware Failure", "value": "920", "description": "" }, { "name": "Hardware Issue", "value": "397", "description": "" }, { "name": "Hardware Purchase", "value": "914", "description": "" }, { "name": "Hardware Support", "value": "466", "description": "" }, { "name": "Hardware Upgrade", "value": "921", "description": "" }, { "name": "Health Benefits", "value": "425", "description": "" }, { "name": "Home PC Performance", "value": "530", "description": "" }, { "name": "Huntress", "value": "481", "description": "" }, { "name": "Huntress Detection", "value": "778", "description": "" }, { "name": "Huntress Detection 365", "value": "777", "description": "" }, { "name": "HuntressAgent' isStopped", "value": "866", "description": "" }, { "name": "Hypervisor CPU Module", "value": "668", "description": "" }, { "name": "Hypervisor Hard Drive", "value": "667", "description": "" }, { "name": "Hypervisor Power Supply", "value": "669", "description": "" }, { "name": "Hypervisor RAM Module", "value": "670", "description": "" }, { "name": "HyperVisor: ESXi", "value": "621", "description": "" }, { "name": "HyperVisor: Hyper-V", "value": "774", "description": "" }, { "name": "Image Right", "value": "272", "description": "" }, { "name": "Image Right", "value": "577", "description": "" }, { "name": "Inbound Calling", "value": "409", "description": "" }, { "name": "Incident Response", "value": "909", "description": "" }, { "name": "Incoming", "value": "115", "description": "" }, { "name": "Informational", "value": "874", "description": "" }, { "name": "Internal Meeting", "value": "549", "description": "" }, { "name": "Internet", "value": "45", "description": "" }, { "name": "Internet", "value": "49", "description": "" }, { "name": "Internet", "value": "61", "description": "" }, { "name": "Internet", "value": "80", "description": "" }, { "name": "Internet", "value": "98", "description": "" }, { "name": "Internet", "value": "504", "description": "" }, { "name": "Internet Connection is Lost", "value": "676", "description": "" }, { "name": "Intranet/LAN", "value": "46", "description": "" }, { "name": "Intranet/LAN", "value": "50", "description": "" }, { "name": "Intranet/LAN", "value": "62", "description": "" }, { "name": "Intranet/LAN", "value": "81", "description": "" }, { "name": "Intranet/LAN", "value": "99", "description": "" }, { "name": "Intrusion Prevention", "value": "784", "description": "" }, { "name": "Inventory Management", "value": "528", "description": "" }, { "name": "iPad", "value": "720", "description": "" }, { "name": "iPad", "value": "734", "description": "" }, { "name": "iPhone App Issue", "value": "420", "description": "" }, { "name": "IPSec Tunnel", "value": "783", "description": "" }, { "name": "IQMS", "value": "797", "description": "" }, { "name": "ISP", "value": "462", "description": "" }, { "name": "Issue Receiving", "value": "313", "description": "" }, { "name": "Issue Sending", "value": "312", "description": "" }, { "name": "IT Staff Tools", "value": "704", "description": "" }, { "name": "Kerri Door System", "value": "835", "description": "" }, { "name": "Kill performed", "value": "792", "description": "" }, { "name": "Kofax", "value": "833", "description": "" }, { "name": "Laptop", "value": "561", "description": "" }, { "name": "Large File Sending", "value": "493", "description": "" }, { "name": "Last Pass", "value": "858", "description": "" }, { "name": "Lenovo Warranty Claim", "value": "865", "description": "" }, { "name": "Licensing Change", "value": "353", "description": "" }, { "name": "Life Cycle Mgmt", "value": "394", "description": "" }, { "name": "Lifecycle Refresh", "value": "928", "description": "" }, { "name": "Lighthouse Alert", "value": "794", "description": "" }, { "name": "Limble", "value": "827", "description": "" }, { "name": "Liongard", "value": "701", "description": "" }, { "name": "LOB Support", "value": "463", "description": "" }, { "name": "Local Admin Rights Request", "value": "828", "description": "" }, { "name": "LogMeIn", "value": "498", "description": "" }, { "name": "Low Bandwidth", "value": "781", "description": "" }, { "name": "Low Battery Charge", "value": "894", "description": "" }, { "name": "Low Disk Space", "value": "396", "description": "" }, { "name": "Lumion", "value": "803", "description": "" }, { "name": "Mailbox Delegation", "value": "570", "description": "" }, { "name": "Mailbox Full", "value": "838", "description": "" }, { "name": "Malvertising", "value": "816", "description": "" }, { "name": "Malware", "value": "554", "description": "" }, { "name": "Managed Power", "value": "393", "description": "" }, { "name": "Microsoft 365 Backup", "value": "884", "description": "" }, { "name": "Mimecast", "value": "703", "description": "" }, { "name": "Mimecast - Allow Sender", "value": "707", "description": "" }, { "name": "Mimecast - Block Sender", "value": "832", "description": "" }, { "name": "Mimecast - DKIM", "value": "807", "description": "" }, { "name": "Mimecast - DMARC", "value": "808", "description": "" }, { "name": "Mimecast - Message Tracking", "value": "806", "description": "" }, { "name": "Mimecast - Release Email", "value": "706", "description": "" }, { "name": "Mimecast - SPF", "value": "809", "description": "" }, { "name": "Mimecast - TTP", "value": "845", "description": "" }, { "name": "Mimecast - URL Protection", "value": "812", "description": "" }, { "name": "Mimecast Plugin", "value": "773", "description": "" }, { "name": "Mimecast Portal", "value": "772", "description": "" }, { "name": "Misc Issue", "value": "512", "description": "" }, { "name": "MiSys", "value": "709", "description": "" }, { "name": "Mobile", "value": "452", "description": "" }, { "name": "Mobile App Issue", "value": "417", "description": "" }, { "name": "Mobile Device", "value": "173", "description": "" }, { "name": "Modem", "value": "246", "description": "" }, { "name": "Modification", "value": "311", "description": "" }, { "name": "Modify", "value": "419", "description": "" }, { "name": "Monitor", "value": "327", "description": "" }, { "name": "MS Excel", "value": "842", "description": "" }, { "name": "MS Office", "value": "332", "description": "" }, { "name": "MS OneDrive", "value": "345", "description": "" }, { "name": "MS Powerpoint", "value": "800", "description": "" }, { "name": "MS Project", "value": "836", "description": "" }, { "name": "MS Skype", "value": "562", "description": "" }, { "name": "MS Teams", "value": "566", "description": "" }, { "name": "MS Teams", "value": "798", "description": "" }, { "name": "MS Word", "value": "799", "description": "" }, { "name": "MSP Tool", "value": "407", "description": "" }, { "name": "N/A", "value": "271", "description": "" }, { "name": "N/A", "value": "442", "description": "" }, { "name": "N/A", "value": "448", "description": "" }, { "name": "N/A", "value": "477", "description": "" }, { "name": "N/A", "value": "502", "description": "" }, { "name": "NAS / SAN", "value": "216", "description": "" }, { "name": "NAS /SAN", "value": "227", "description": "" }, { "name": "Netbird", "value": "939", "description": "" }, { "name": "Network Element Offline", "value": "681", "description": "" }, { "name": "Network: Firewalls - Sophos XG", "value": "622", "description": "" }, { "name": "Network: NAS Devices - Synology", "value": "615", "description": "" }, { "name": "Network: Switches - HP_Aruba", "value": "630", "description": "" }, { "name": "Network: Unifi APs", "value": "903", "description": "" }, { "name": "Network: UPS Devices - APC", "value": "620", "description": "" }, { "name": "Networking", "value": "531", "description": "" }, { "name": "Networking Equipment", "value": "934", "description": "" }, { "name": "New active threat", "value": "790", "description": "" }, { "name": "New MSA", "value": "302", "description": "" }, { "name": "New request", "value": "310", "description": "" }, { "name": "New Security Tool (MSA)", "value": "824", "description": "" }, { "name": "New Software", "value": "822", "description": "" }, { "name": "Newforma", "value": "533", "description": "" }, { "name": "Newforma", "value": "685", "description": "" }, { "name": "Nextiva", "value": "499", "description": "" }, { "name": "Nextiva", "value": "563", "description": "" }, { "name": "Nextiva Specific Issue", "value": "266", "description": "" }, { "name": "Nitro Pro PDF", "value": "588", "description": "" }, { "name": "No Survey", "value": "262", "description": "" }, { "name": "Non-Deliverable", "value": "257", "description": "" }, { "name": "Non-Windows Server", "value": "330", "description": "" }, { "name": "Not Detected", "value": "876", "description": "" }, { "name": "Not Running", "value": "875", "description": "" }, { "name": "Not Up To Date", "value": "877", "description": "" }, { "name": "O365 ADD", "value": "432", "description": "" }, { "name": "O365 Password", "value": "434", "description": "" }, { "name": "O365 REMOVE", "value": "433", "description": "" }, { "name": "O365 SPAM", "value": "431", "description": "" }, { "name": "Office Move", "value": "731", "description": "" }, { "name": "Office Move", "value": "815", "description": "" }, { "name": "Offline", "value": "276", "description": "" }, { "name": "Offline", "value": "284", "description": "" }, { "name": "OpenDNS", "value": "692", "description": "" }, { "name": "Operating System", "value": "557", "description": "" }, { "name": "Operational", "value": "871", "description": "" }, { "name": "Optimization - Server", "value": "218", "description": "" }, { "name": "Other", "value": "232", "description": "" }, { "name": "Other", "value": "247", "description": "" }, { "name": "Other", "value": "251", "description": "" }, { "name": "Other", "value": "255", "description": "" }, { "name": "Other", "value": "258", "description": "" }, { "name": "Other", "value": "265", "description": "" }, { "name": "Other", "value": "275", "description": "" }, { "name": "Other", "value": "300", "description": "" }, { "name": "Other", "value": "317", "description": "" }, { "name": "Other", "value": "329", "description": "" }, { "name": "Other", "value": "357", "description": "" }, { "name": "Other", "value": "364", "description": "" }, { "name": "Other", "value": "370", "description": "" }, { "name": "Other", "value": "373", "description": "" }, { "name": "Other", "value": "385", "description": "" }, { "name": "Other", "value": "386", "description": "" }, { "name": "Other", "value": "399", "description": "" }, { "name": "Other", "value": "400", "description": "" }, { "name": "Other", "value": "401", "description": "" }, { "name": "Other", "value": "402", "description": "" }, { "name": "Other", "value": "403", "description": "" }, { "name": "Other", "value": "404", "description": "" }, { "name": "Other", "value": "412", "description": "" }, { "name": "Other", "value": "424", "description": "" }, { "name": "Other", "value": "429", "description": "" }, { "name": "Other", "value": "435", "description": "" }, { "name": "Other", "value": "467", "description": "" }, { "name": "Other", "value": "479", "description": "" }, { "name": "Other", "value": "496", "description": "" }, { "name": "Other", "value": "508", "description": "" }, { "name": "Other", "value": "730", "description": "" }, { "name": "Other", "value": "762", "description": "" }, { "name": "Other Hardware", "value": "938", "description": "" }, { "name": "Out of Office", "value": "839", "description": "" }, { "name": "Outbound", "value": "114", "description": "" }, { "name": "Outbound Calling", "value": "410", "description": "" }, { "name": "Outbound Issue", "value": "362", "description": "" }, { "name": "Outlook", "value": "110", "description": "" }, { "name": "Outlook / Offline", "value": "108", "description": "" }, { "name": "Output Load Amps", "value": "290", "description": "" }, { "name": "Output Load Watts", "value": "289", "description": "" }, { "name": "Output Status", "value": "288", "description": "" }, { "name": "Pardot", "value": "805", "description": "" }, { "name": "Passportal", "value": "690", "description": "" }, { "name": "Password Reset", "value": "759", "description": "" }, { "name": "Patching", "value": "193", "description": "" }, { "name": "Paycheck", "value": "427", "description": "" }, { "name": "Paycom", "value": "428", "description": "" }, { "name": "PBX", "value": "206", "description": "" }, { "name": "PBX", "value": "500", "description": "" }, { "name": "PepWave | CradlePoint", "value": "263", "description": "" }, { "name": "Performance", "value": "555", "description": "" }, { "name": "Performance - Slow PC", "value": "560", "description": "" }, { "name": "Performance Resolution", "value": "922", "description": "" }, { "name": "Peripheral", "value": "376", "description": "" }, { "name": "Peripheral(s)", "value": "505", "description": "" }, { "name": "Peripherals/Accessories", "value": "936", "description": "" }, { "name": "Phishing", "value": "316", "description": "" }, { "name": "Phishing", "value": "910", "description": "" }, { "name": "Phising:Attatchment", "value": "854", "description": "" }, { "name": "Phising:Credential Harvesting", "value": "853", "description": "" }, { "name": "Phising:Link", "value": "852", "description": "" }, { "name": "Phone", "value": "44", "description": "" }, { "name": "Phone", "value": "48", "description": "" }, { "name": "Phone", "value": "79", "description": "" }, { "name": "Phone", "value": "96", "description": "" }, { "name": "Phone", "value": "103", "description": "" }, { "name": "Phone", "value": "375", "description": "" }, { "name": "Phone", "value": "826", "description": "" }, { "name": "Phone System", "value": "729", "description": "" }, { "name": "PMC", "value": "689", "description": "" }, { "name": "Point of Sale", "value": "87", "description": "" }, { "name": "Point of Sale", "value": "88", "description": "" }, { "name": "Point of Sale", "value": "92", "description": "" }, { "name": "Point of Sale", "value": "93", "description": "" }, { "name": "Point of Sale", "value": "97", "description": "" }, { "name": "POS Pizza", "value": "644", "description": "" }, { "name": "Possible Power Outage", "value": "893", "description": "" }, { "name": "Power", "value": "717", "description": "" }, { "name": "Power Status", "value": "279", "description": "" }, { "name": "PowerBI", "value": "591", "description": "" }, { "name": "Preactor", "value": "296", "description": "" }, { "name": "Primary ISP Down", "value": "260", "description": "" }, { "name": "Printer", "value": "17", "description": "" }, { "name": "Printer", "value": "34", "description": "" }, { "name": "Printer", "value": "64", "description": "" }, { "name": "Printer", "value": "85", "description": "" }, { "name": "Printer", "value": "102", "description": "" }, { "name": "Printer", "value": "127", "description": "" }, { "name": "Printer", "value": "228", "description": "" }, { "name": "Printer", "value": "374", "description": "" }, { "name": "Printing", "value": "377", "description": "" }, { "name": "Processes and services", "value": "440", "description": "" }, { "name": "Production Lines (MES)", "value": "264", "description": "" }, { "name": "PSA", "value": "575", "description": "" }, { "name": "Pulse Secure VPN", "value": "796", "description": "" }, { "name": "QBR Identified Need", "value": "926", "description": "" }, { "name": "Quarantine performed", "value": "787", "description": "" }, { "name": "QuickBooks", "value": "583", "description": "" }, { "name": "Quote", "value": "128", "description": "" }, { "name": "Rackspace", "value": "107", "description": "" }, { "name": "Raid Status", "value": "282", "description": "" }, { "name": "Ransomware", "value": "911", "description": "" }, { "name": "Ransomware: Windows Servers", "value": "747", "description": "" }, { "name": "Ransomware: Windows Workstations", "value": "748", "description": "" }, { "name": "RDP\\RDS Gateway", "value": "495", "description": "" }, { "name": "Receiving Issue", "value": "363", "description": "" }, { "name": "Remote Workforce", "value": "770", "description": "" }, { "name": "Remove User/Line", "value": "414", "description": "" }, { "name": "Renewal", "value": "916", "description": "" }, { "name": "Report", "value": "510", "description": "" }, { "name": "Restore Request", "value": "267", "description": "" }, { "name": "ResWare", "value": "580", "description": "" }, { "name": "Revisto", "value": "864", "description": "" }, { "name": "Revit", "value": "390", "description": "" }, { "name": "Revit", "value": "537", "description": "" }, { "name": "Revit", "value": "582", "description": "" }, { "name": "Risk", "value": "872", "description": "" }, { "name": "Risk Acceptance", "value": "913", "description": "" }, { "name": "Risk Assessment", "value": "863", "description": "" }, { "name": "RMA", "value": "559", "description": "" }, { "name": "RMM", "value": "129", "description": "" }, { "name": "RMM", "value": "219", "description": "" }, { "name": "RMM Agent", "value": "700", "description": "" }, { "name": "RocketCyber", "value": "693", "description": "" }, { "name": "Role Change", "value": "213", "description": "" }, { "name": "Router", "value": "245", "description": "" }, { "name": "Router", "value": "476", "description": "" }, { "name": "Router / Switch", "value": "176", "description": "" }, { "name": "Router / Switch", "value": "229", "description": "" }, { "name": "Safe Sender Validation", "value": "844", "description": "" }, { "name": "Sage", "value": "586", "description": "" }, { "name": "Sage 300", "value": "305", "description": "" }, { "name": "Sage 500", "value": "295", "description": "" }, { "name": "Sagitta", "value": "274", "description": "" }, { "name": "Sagitta", "value": "291", "description": "" }, { "name": "Sagitta", "value": "576", "description": "" }, { "name": "SAN/NAS", "value": "456", "description": "" }, { "name": "SAN/NAS", "value": "474", "description": "" }, { "name": "Scan to Email", "value": "551", "description": "" }, { "name": "Scanning", "value": "550", "description": "" }, { "name": "Secure Messaging", "value": "492", "description": "" }, { "name": "Security Group", "value": "406", "description": "" }, { "name": "Security:Account Locked", "value": "846", "description": "" }, { "name": "Self Test Result", "value": "286", "description": "" }, { "name": "SentinelOne", "value": "763", "description": "" }, { "name": "Server", "value": "11", "description": "" }, { "name": "Server", "value": "28", "description": "" }, { "name": "Server", "value": "60", "description": "" }, { "name": "Server", "value": "78", "description": "" }, { "name": "Server", "value": "95", "description": "" }, { "name": "Server", "value": "123", "description": "" }, { "name": "Server", "value": "230", "description": "" }, { "name": "Server", "value": "444", "description": "" }, { "name": "Server - Authentication Issue", "value": "234", "description": "" }, { "name": "Server/Storage", "value": "933", "description": "" }, { "name": "Service Account", "value": "306", "description": "" }, { "name": "Service Addition", "value": "917", "description": "" }, { "name": "Service Monitor", "value": "905", "description": "" }, { "name": "Shared Mailbox", "value": "814", "description": "" }, { "name": "Sharepoint", "value": "850", "description": "" }, { "name": "Shop Floor Online", "value": "294", "description": "" }, { "name": "Shop Floor Online", "value": "538", "description": "" }, { "name": "Shop Floor Online", "value": "642", "description": "" }, { "name": "Shortell", "value": "565", "description": "" }, { "name": "Simple Shop Floor (SSF)", "value": "710", "description": "" }, { "name": "SketchUp", "value": "585", "description": "" }, { "name": "Slow PC", "value": "256", "description": "" }, { "name": "Smartsheets", "value": "801", "description": "" }, { "name": "SMS iPad App (Hynes)", "value": "768", "description": "" }, { "name": "SoftPro", "value": "589", "description": "" }, { "name": "Software", "value": "16", "description": "" }, { "name": "Software", "value": "33", "description": "" }, { "name": "Software", "value": "83", "description": "" }, { "name": "Software", "value": "94", "description": "" }, { "name": "Software", "value": "101", "description": "" }, { "name": "Software", "value": "408", "description": "" }, { "name": "Software", "value": "447", "description": "" }, { "name": "Software", "value": "558", "description": "" }, { "name": "Software Renewal", "value": "823", "description": "" }, { "name": "Software/License Purchase", "value": "915", "description": "" }, { "name": "Software/Licensing", "value": "935", "description": "" }, { "name": "SolidWorks", "value": "592", "description": "" }, { "name": "Sophos Full Disk Encryption", "value": "695", "description": "" }, { "name": "Sophos MDM", "value": "702", "description": "" }, { "name": "Sophos MDM", "value": "819", "description": "" }, { "name": "Sophos PhishThreat", "value": "691", "description": "" }, { "name": "Sophos PhishThreat", "value": "743", "description": "" }, { "name": "Sophos VPN", "value": "494", "description": "" }, { "name": "Sophos XG EOL", "value": "881", "description": "" }, { "name": "Sophos XG EOL (Currently HaaS)", "value": "888", "description": "" }, { "name": "Sophos XG EOL (Multi-Site)", "value": "889", "description": "" }, { "name": "Sophos:Block Website", "value": "855", "description": "" }, { "name": "Spam", "value": "112", "description": "" }, { "name": "SPAM", "value": "314", "description": "" }, { "name": "Spanning Tree Changed From Forwarding", "value": "674", "description": "" }, { "name": "Spyware/Malware", "value": "106", "description": "" }, { "name": "Stack Switch Member Status Change", "value": "673", "description": "" }, { "name": "Stack Switch Port Status Change", "value": "672", "description": "" }, { "name": "Static IP request", "value": "380", "description": "" }, { "name": "Storage", "value": "326", "description": "" }, { "name": "Storage", "value": "723", "description": "" }, { "name": "Strategic Initiative", "value": "931", "description": "" }, { "name": "Subcontractor", "value": "749", "description": "" }, { "name": "Subscription License", "value": "878", "description": "" }, { "name": "Survey", "value": "261", "description": "" }, { "name": "Suspect", "value": "821", "description": "" }, { "name": "Switch", "value": "125", "description": "" }, { "name": "Switch", "value": "222", "description": "" }, { "name": "Switch", "value": "325", "description": "" }, { "name": "Switch", "value": "455", "description": "" }, { "name": "Switch", "value": "473", "description": "" }, { "name": "Switch", "value": "722", "description": "" }, { "name": "SysPro", "value": "590", "description": "" }, { "name": "System Error", "value": "513", "description": "" }, { "name": "System Error", "value": "516", "description": "" }, { "name": "System Error", "value": "517", "description": "" }, { "name": "System Error", "value": "518", "description": "" }, { "name": "System Error", "value": "519", "description": "" }, { "name": "System Error", "value": "600", "description": "" }, { "name": "System Error", "value": "608", "description": "" }, { "name": "System Fan Status", "value": "283", "description": "" }, { "name": "System Status", "value": "277", "description": "" }, { "name": "System Temperature", "value": "278", "description": "" }, { "name": "Tablet", "value": "736", "description": "" }, { "name": "Teams Room", "value": "810", "description": "" }, { "name": "Technology Upgrade", "value": "929", "description": "" }, { "name": "Threat", "value": "870", "description": "" }, { "name": "Threat Mitigation Alert", "value": "789", "description": "" }, { "name": "TimeZest SaaS", "value": "739", "description": "" }, { "name": "Too Many Sign In Attempts", "value": "785", "description": "" }, { "name": "Upgrade", "value": "547", "description": "" }, { "name": "UPS", "value": "392", "description": "" }, { "name": "UPS", "value": "471", "description": "" }, { "name": "UPS", "value": "830", "description": "" }, { "name": "UPS - Low Battery Charge", "value": "678", "description": "" }, { "name": "UPS - Possible Power Outage", "value": "677", "description": "" }, { "name": "UPS WorldShip", "value": "837", "description": "" }, { "name": "User", "value": "120", "description": "" }, { "name": "User Account", "value": "179", "description": "" }, { "name": "User at Risk Alert", "value": "831", "description": "" }, { "name": "User at risk detected", "value": "793", "description": "" }, { "name": "User enabled agent", "value": "791", "description": "" }, { "name": "User Error", "value": "515", "description": "" }, { "name": "User Error", "value": "601", "description": "" }, { "name": "User Error", "value": "603", "description": "" }, { "name": "User Error", "value": "606", "description": "" }, { "name": "User Error", "value": "607", "description": "" }, { "name": "User Error", "value": "610", "description": "" }, { "name": "User Error", "value": "611", "description": "" }, { "name": "User Termination", "value": "526", "description": "" }, { "name": "Vendor Issue", "value": "381", "description": "" }, { "name": "Verizon Phone System", "value": "848", "description": "" }, { "name": "Video Device Disconnected", "value": "780", "description": "" }, { "name": "Virtualization", "value": "475", "description": "" }, { "name": "Voice Services", "value": "464", "description": "" }, { "name": "Voicemail", "value": "411", "description": "" }, { "name": "VoIP", "value": "436", "description": "" }, { "name": "VPN", "value": "181", "description": "" }, { "name": "VPN", "value": "199", "description": "" }, { "name": "VPN", "value": "449", "description": "" }, { "name": "VPN site to site Issue", "value": "358", "description": "" }, { "name": "Vulnerability Management", "value": "912", "description": "" }, { "name": "Warning", "value": "873", "description": "" }, { "name": "Warranty Claim", "value": "461", "description": "" }, { "name": "Warranty Replacement", "value": "919", "description": "" }, { "name": "Warranty/Service Contract", "value": "937", "description": "" }, { "name": "WattBox", "value": "742", "description": "" }, { "name": "Webroot", "value": "694", "description": "" }, { "name": "Website", "value": "405", "description": "" }, { "name": "WiFi", "value": "104", "description": "" }, { "name": "WiFi", "value": "548", "description": "" }, { "name": "WiFi Access Point", "value": "446", "description": "" }, { "name": "WiFi AP", "value": "356", "description": "" }, { "name": "WindChill", "value": "737", "description": "" }, { "name": "Windows 10 EOL", "value": "882", "description": "" }, { "name": "Windows Server", "value": "613", "description": "" }, { "name": "Windows Server", "value": "726", "description": "" }, { "name": "Windows Server", "value": "733", "description": "" }, { "name": "Windows Server: High CPU", "value": "900", "description": "" }, { "name": "Windows Server: High Memory", "value": "898", "description": "" }, { "name": "Windows Server: Low Disk Space", "value": "899", "description": "" }, { "name": "Windows Server: Offline", "value": "901", "description": "" }, { "name": "Windows Servers", "value": "907", "description": "" }, { "name": "Windows Workstation", "value": "323", "description": "" }, { "name": "Windows Workstation", "value": "616", "description": "" }, { "name": "Windows Workstation", "value": "725", "description": "" }, { "name": "Windows Workstation Life-cycle", "value": "738", "description": "" }, { "name": "Windows Workstation New", "value": "322", "description": "" }, { "name": "Windows Workstation Repurpose", "value": "746", "description": "" }, { "name": "Windows Workstation: Low Disk Space", "value": "902", "description": "" }, { "name": "Windows Workstations", "value": "906", "description": "" }, { "name": "Windows: Role - DHCP Server", "value": "624", "description": "" }, { "name": "Windows: Role - DNS Server", "value": "627", "description": "" }, { "name": "Windows: Role - Domain Controller", "value": "626", "description": "" }, { "name": "Windows: Role - Exchange Server", "value": "625", "description": "" }, { "name": "Windows: Role - Remote Desktop Server", "value": "645", "description": "" }, { "name": "Windows: Role - SQL Server Express", "value": "629", "description": "" }, { "name": "Windows: Role - SQL Server Full", "value": "628", "description": "" }, { "name": "WindowsUpdate Server- Patch Failure", "value": "897", "description": "" }, { "name": "WindowsUpdate Server- Reboot Required", "value": "649", "description": "" }, { "name": "WindowsUpdate Workstation- Patch Failure", "value": "896", "description": "" }, { "name": "WindowsUpdate- Reboot Required", "value": "895", "description": "" }, { "name": "Wireless", "value": "190", "description": "" }, { "name": "Wireless", "value": "231", "description": "" }, { "name": "Wiring", "value": "716", "description": "" }, { "name": "Wolfepak", "value": "818", "description": "" }, { "name": "Workstation", "value": "19", "description": "" }, { "name": "Workstation", "value": "32", "description": "" }, { "name": "Workstation", "value": "63", "description": "" }, { "name": "Workstation", "value": "82", "description": "" }, { "name": "Workstation", "value": "100", "description": "" }, { "name": "Workstation", "value": "121", "description": "" }, { "name": "Workstation", "value": "443", "description": "" }, { "name": "Workstation (Lifecycle)", "value": "224", "description": "" }, { "name": "Workstation (New Device)", "value": "233", "description": "" }, { "name": "Xactimate", "value": "536", "description": "" }, { "name": "Xactimate", "value": "578", "description": "" }, { "name": "Zoom", "value": "686", "description": "" }, { "name": "Zoom Room Update", "value": "705", "description": "" }, { "name": "Zoom Rooms", "value": "298", "description": "" }, { "name": "Zoom Voice", "value": "501", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "ticketCategory", "displayName": "Ticket category (Picklist | ticketCategory)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Add New User", "value": "127", "description": "" }, { "name": "Client Success", "value": "149", "description": "" }, { "name": "Copy (1) of CSM - Solution Des", "value": "176", "description": "" }, { "name": "CSM - Client Onboarding", "value": "121", "description": "" }, { "name": "CSM - Lifecycle Management", "value": "173", "description": "" }, { "name": "CSM - Solution Design", "value": "174", "description": "" }, { "name": "CSM - Strategic Account Mgmt", "value": "175", "description": "" }, { "name": "Customer Offboarding", "value": "123", "description": "" }, { "name": "Decommission Device", "value": "147", "description": "" }, { "name": "Deploy Infrastructure Device", "value": "138", "description": "" }, { "name": "Deploy Misc. Device", "value": "116", "description": "" }, { "name": "Deploy Product Order Only", "value": "154", "description": "" }, { "name": "Deploy Software", "value": "145", "description": "" }, { "name": "Deploy Workstation", "value": "101", "description": "" }, { "name": "IT Operations", "value": "106", "description": "" }, { "name": "Lighthouse Electric Company", "value": "163", "description": "" }, { "name": "Network Operations Center", "value": "2", "description": "" }, { "name": "New Business Development", "value": "152", "description": "" }, { "name": "Penn Energy Resources", "value": "162", "description": "" }, { "name": "Post Sale - Order Processing", "value": "136", "description": "" }, { "name": "Premier Automation LLC", "value": "126", "description": "" }, { "name": "Project Delivery (FP)", "value": "113", "description": "" }, { "name": "Project Delivery (Internal)", "value": "137", "description": "" }, { "name": "Project Delivery (TM)", "value": "151", "description": "" }, { "name": "Purchase Order (HaaS)", "value": "156", "description": "" }, { "name": "Purchase Order (Internal)", "value": "165", "description": "" }, { "name": "RMA", "value": "5", "description": "" }, { "name": "RocketCyber Alert", "value": "140", "description": "" }, { "name": "Sales - Quote Request", "value": "171", "description": "" }, { "name": "Sales - Service Escalation", "value": "170", "description": "" }, { "name": "Security Operations Center", "value": "161", "description": "" }, { "name": "Service Desk", "value": "3", "description": "Default value" }, { "name": "Subcontractor", "value": "150", "description": "" }, { "name": "The Thrasher Group", "value": "131", "description": "" }, { "name": "Ticket Triage", "value": "159", "description": "" }, { "name": "TNT Dynamite Pizza", "value": "133", "description": "" }, { "name": "User Separation", "value": "128", "description": "" }, { "name": "Vendor Support", "value": "155", "description": "" }, { "name": "Vorteq Coil Finishers", "value": "164", "description": "" }, { "name": "Wulf Employee Onboarding", "value": "125", "description": "" }, { "name": "Wulf Employee Separation", "value": "129", "description": "" }, { "name": "WULF ESCALATION DESK", "value": "134", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "ticketNumber", "displayName": "Ticket number (String | ticketNumber)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "ticketType", "displayName": "Ticket type (Picklist | ticketType)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Alert", "value": "5", "description": "" }, { "name": "Change Request", "value": "4", "description": "" }, { "name": "Incident", "value": "2", "description": "" }, { "name": "Problem", "value": "3", "description": "" }, { "name": "Service Request", "value": "1", "description": "Default value" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "title", "displayName": "Title (String | title)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Additional Contacts", "displayName": "Additional contacts (1 | Additional Contacts)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "AI Triage Status", "displayName": "Ai triage status (Picklist | AI Triage Status)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "AI Triage Completed", "value": "AI Triage Completed", "description": "" }, { "name": "AI Triage Failed", "value": "AI Triage Failed", "description": "" }, { "name": "AI Triage Request", "value": "AI Triage Request", "description": "" }, { "name": "AI Triage Skipped", "value": "AI Triage Skipped", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Company Ownership", "displayName": "Company ownership (Picklist | Company Ownership)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "AccPac", "value": "AccPac", "description": "" }, { "name": "Lighthouse", "value": "Lighthouse", "description": "" }, { "name": "Preactor", "value": "Preactor", "description": "" }, { "name": "Trivium", "value": "Trivium", "description": "" }, { "name": "Wulf Consulting", "value": "Wulf Consulting", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Company Team Member", "displayName": "Company team member (1 | Company Team Member)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Company Ticket ID#", "displayName": "Company ticket id (1 | Company Ticket ID#)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "CSTicketNumber", "displayName": "Cs ticket number (1 | CSTicketNumber)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Customer Thermometer Temperature", "displayName": "Customer thermometer temperature (1 | Customer Thermometer Temperature)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Equipment Location", "displayName": "Equipment location (1 | Equipment Location)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Exal Division", "displayName": "Exal division (Picklist | Exal Division)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "MES", "value": "MES", "description": "" }, { "name": "Operations", "value": "Operations", "description": "" }, { "name": "South America", "value": "South America", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Issue Type Suggestion", "displayName": "Issue type suggestion (1 | Issue Type Suggestion)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "ITGlue SOP or KB Article", "displayName": "It glue sop or kb article (1 | ITGlue SOP or KB Article)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Job Number", "displayName": "Job number (1 | Job Number)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "New Hire Start Date", "displayName": "New hire start date (1 | New Hire Start Date)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Original Title", "displayName": "Original title (1 | Original Title)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Project Manager", "displayName": "Project manager (Picklist | Project Manager)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Jake Hammel", "value": "Jake Hammel", "description": "" }, { "name": "James Meier", "value": "James Meir", "description": "" }, { "name": "John Stvartak", "value": "John Stvartak", "description": "" }, { "name": "Lorentz Hinrichsen", "value": "Lorentz Hinrichsen", "description": "" }, { "name": "Tom Carlin", "value": "Tom Carlin", "description": "" }, { "name": "Tony Feerst", "value": "Tony Feerst", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Project Technical Lead", "displayName": "Project technical lead (Picklist | Project Technical Lead)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Charles Mathews", "value": "Charles Mathews", "description": "" }, { "name": "James Meier", "value": "James Meier", "description": "" }, { "name": "Lorentz Hinrichsen", "value": "Lorentz Hinrichsen", "description": "" }, { "name": "Steve Cianflone", "value": "Steve Cianflone", "description": "" }, { "name": "Tom Carlin", "value": "Tom Carlin", "description": "" }, { "name": "Tony Feerst", "value": "Tony Feerst", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Purchasing Ticket", "displayName": "Purchasing ticket (1 | Purchasing Ticket)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Quote Number", "displayName": "Quote number (1 | Quote Number)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Review Status", "displayName": "Review status (Picklist | Review Status)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Complete", "value": "Complete", "description": "" }, { "name": "Reconcile Billing", "value": "Reconcile Billing", "description": "" }, { "name": "Waiting CSM Review", "value": "Waiting CSM Review", "description": "" }, { "name": "Waiting Escalation Review", "value": "Waiting Escalation Review", "description": "" }, { "name": "Waiting Huddle Review", "value": "Waiting Huddle Review", "description": "" }, { "name": "Waiting QBR", "value": "Waiting QBR", "description": "" }, { "name": "Waiting TAM Review", "value": "Waiting TAM Review", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Service Delivery Improvement", "displayName": "Service delivery improvement (Picklist | Service Delivery Improvement)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "Automation Request", "value": "Automation Request", "description": "" }, { "name": "Checklist Request/Review", "value": "Checklist Request/Review", "description": "" }, { "name": "Documentation Request/Review", "value": "Documentation Request/Review", "description": "" }, { "name": "Interview Ticket", "value": "Interview Ticket", "description": "" }, { "name": "Process Review", "value": "Process Review", "description": "" }, { "name": "QA Review", "value": "QA Review", "description": "" }, { "name": "Ticket Prevention", "value": "Ticket Prevention", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Shipment ETA", "displayName": "Shipment eta (3 | Shipment ETA)", "type": "dateTime", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Shipment Tracking Number(s)", "displayName": "Shipment tracking number s (1 | Shipment Tracking Number(s))", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "SOP Link", "displayName": "Sop link (1 | SOP Link)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Sub Issue Type Suggestion", "displayName": "Sub issue type suggestion (1 | Sub Issue Type Suggestion)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Subcontractor", "displayName": "Subcontractor (Picklist | Subcontractor)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "InTouch Technologies", "value": "InTouch Technologies", "description": "" }, { "name": "MGM Communications", "value": "MGM Communications", "description": "" }, { "name": "Other", "value": "Other", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "TeamsPost", "displayName": "Teams post (Picklist | TeamsPost)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "InventoryManagemet", "value": "Yes", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "Termination Date", "displayName": "Termination date (1 | Termination Date)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "Work Around In-Place", "displayName": "Work around in place (Picklist | Work Around In-Place)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "No", "value": "No", "description": "" }, { "name": "Unknown", "value": "Unknown", "description": "" }, { "name": "Yes", "value": "Yes", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "WCode", "displayName": "W code (Picklist | WCode)", "type": "options", "required": false, "display": true, "defaultMatch": false, "options": [ { "name": "CAF", "value": "CAF", "description": "" }, { "name": "Croop", "value": "Croop", "description": "" }, { "name": "EAF", "value": "EAF", "description": "" }, { "name": "LOB01", "value": "LOB01", "description": "" }, { "name": "OS01", "value": "OS01", "description": "" }, { "name": "RO1", "value": "RO1", "description": "" }, { "name": "Security:O365", "value": "Security:O365", "description": "" }, { "name": "Training Request", "value": "TR", "description": "" }, { "name": "UC1", "value": "UC1", "description": "" }, { "name": "User", "value": "User", "description": "" }, { "name": "VendorBug", "value": "VendorBug", "description": "" } ], "canBeUsedToMatch": false, "removed": true }, { "id": "zOrphanLabtech-LabTechID", "displayName": "Z orphan labtech lab tech ID (1 | zOrphanLabtech-LabTechID)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true }, { "id": "zOrphanLabtech-LTAlertID", "displayName": "Z orphan labtech lt alert ID (1 | zOrphanLabtech-LTAlertID)", "type": "string", "required": false, "display": true, "defaultMatch": false, "canBeUsedToMatch": false, "removed": true } ], "attemptToConvertTypes": false, "convertFieldsToString": false } }, "type": "n8n-nodes-autotask.autotask", "typeVersion": 1, "position": [ 208, 368 ], "id": "1c0b862d-04f5-4952-950b-6f2208dd7f8c", "name": "Update a ticket3", "credentials": { "autotaskApi": { "id": "5IwoEmby4IbJUtEn", "name": "Autotask account 2" } } } ], "pinData": { "When Executed by Another Workflow": [ { "json": { "entityData": { "Id": 650077, "Title": "Suspect | P3 | Potential Cleartext Password on Local System by File Write @ Wulf Consulting - NFR", "Description": "From Blumira : The document titled orC:\\Users\\james.meier\\Downloads\\IRC - Password Policy.docx and C:\\Users\\james.meier\\Downloads\\~$C - Password Policy.docx, possibly contains plain text passwords. Even if stored privately on a workstation, passwords should never be stored in plain text files. We highly recommend a password safe software solution or Identity and Access Management solution. Techniques used to get credentials include keylogging or credential dumping. Using legitimate credentials can give adversaries access to systems, make them harder to detect, and provide the opportunity to create more accounts to help achieve their goals.", "TicketType": "1", "TicketCategory": "159", "Priority": "6", "QueueID": "5", "IssueType": "", "SubIssueType": "", "TicketNumber": "T20251216.0165", "TicketCreateDate": "12/16/2025 7:36:32 PM", "ConfigurationItemID": "" }, "entityId": 650077, "entityType": "Ticket" }, "pairedItem": { "item": 0 } } ], "Autotask Trigger": [ { "json": { "headers": { "connection": "keep-alive", "host": "n8n.wulfnetwork.com", "x-forwarded-scheme": "https", "x-forwarded-proto": "https", "x-forwarded-for": "8.34.161.5, 10.215.0.29", "x-real-ip": "10.215.0.29", "content-length": "1648", "accept-encoding": "gzip, br", "cdn-loop": "cloudflare; loops=1", "cf-connecting-ip": "8.34.161.5", "cf-ipcountry": "US", "cf-ray": "9ced8d3c4833f152-EWR", "cf-visitor": "{\"scheme\":\"https\"}", "cf-warp-tag-id": "50fa8129-a4c1-4050-8a25-cf14468c687b", "content-type": "application/json; charset=utf-8", "x-hook-signature": "sha1=knoFTDbo3yxU6GXWmi9LGtP+hKU=" }, "body": { "Action": "Create", "Guid": "b4a35cce-308a-4103-919d-f1351def8970", "EntityType": "Ticket", "Id": 663507, "Fields": { "Description": "On Friday, wulf software requested an update to Windows. My staff initiated that process at end of day Friday. Machine sat all weekend at the logon screen. This morning, we logged on, and started FileMaker. We got an error message with title \"FileMaker Pro.exe - System error\" and text \"The code execution cannot proceed because mfc140u.dll was not found. Reinstalling the program may fix this problem.\" \r\nWe powered cycled the machine, at which time, it came up with the window update message, with percents and don't turn the machine off stuff. So, does that mean it didn't complete the update on Friday, or that we didn't properly do something??? \r\nafter power cycle, we got the same message. Power cycled again to make sure that there were not more window updates, and we get the same message. \r\nThis is a production machine which should have been working at 6 am this morning, but is not. If I don''t get a response from Wulf by 10 am, at 10 am, I will start to work on the machine using prompts from ChatGPT. \r\nContact Todd Kaercher", "CompanyID": "29683395", "Title": "DT020, mfc140u.dll is missing, FM error", "TicketType": "2", "TicketCategory": "3", "IssueType": "", "Priority": "3", "QueueID": "5", "SubIssueType": "", "TicketCreateDate": "2/16/2026 1:56:57 PM", "CreatorResourceID": "", "ContactID": "31865203", "ConfigurationItemID": "", "AI Triage Status": "", "TicketNumber": "T20260216.0086" }, "EventTime": "2026-02-16T13:56:58Z", "SequenceNumber": 8108, "PersonId": 31865203 }, "mappedBody": { "eventType": "Create", "entityType": "Ticket", "entityId": 663507, "entityData": { "Description": "On Friday, wulf software requested an update to Windows. My staff initiated that process at end of day Friday. Machine sat all weekend at the logon screen. This morning, we logged on, and started FileMaker. We got an error message with title \"FileMaker Pro.exe - System error\" and text \"The code execution cannot proceed because mfc140u.dll was not found. Reinstalling the program may fix this problem.\" \r\nWe powered cycled the machine, at which time, it came up with the window update message, with percents and don't turn the machine off stuff. So, does that mean it didn't complete the update on Friday, or that we didn't properly do something??? \r\nafter power cycle, we got the same message. Power cycled again to make sure that there were not more window updates, and we get the same message. \r\nThis is a production machine which should have been working at 6 am this morning, but is not. If I don''t get a response from Wulf by 10 am, at 10 am, I will start to work on the machine using prompts from ChatGPT. \r\nContact Todd Kaercher", "CompanyID": "29683395", "Title": "DT020, mfc140u.dll is missing, FM error", "TicketType": "2", "TicketCategory": "3", "IssueType": "", "Priority": "3", "QueueID": "5", "SubIssueType": "", "TicketCreateDate": "2/16/2026 1:56:57 PM", "CreatorResourceID": "", "ContactID": "31865203", "ConfigurationItemID": "", "AI Triage Status": "", "TicketNumber": "T20260216.0086" }, "timestamp": "2026-02-16T13:56:58Z", "webhookId": 0 }, "entityType": "Ticket", "normalizedEntityType": "tickets", "originalEntityType": "Ticket", "eventType": "Create", "entityId": 663507, "entityData": { "Description": "On Friday, wulf software requested an update to Windows. My staff initiated that process at end of day Friday. Machine sat all weekend at the logon screen. This morning, we logged on, and started FileMaker. We got an error message with title \"FileMaker Pro.exe - System error\" and text \"The code execution cannot proceed because mfc140u.dll was not found. Reinstalling the program may fix this problem.\" \r\nWe powered cycled the machine, at which time, it came up with the window update message, with percents and don't turn the machine off stuff. So, does that mean it didn't complete the update on Friday, or that we didn't properly do something??? \r\nafter power cycle, we got the same message. Power cycled again to make sure that there were not more window updates, and we get the same message. \r\nThis is a production machine which should have been working at 6 am this morning, but is not. If I don''t get a response from Wulf by 10 am, at 10 am, I will start to work on the machine using prompts from ChatGPT. \r\nContact Todd Kaercher", "CompanyID": "29683395", "Title": "DT020, mfc140u.dll is missing, FM error", "TicketType": "2", "TicketCategory": "3", "IssueType": "", "Priority": "3", "QueueID": "5", "SubIssueType": "", "TicketCreateDate": "2/16/2026 1:56:57 PM", "CreatorResourceID": "", "ContactID": "31865203", "ConfigurationItemID": "", "AI Triage Status": "", "TicketNumber": "T20260216.0086" }, "timestamp": "2026-02-16T13:56:58Z", "webhookId": 0, "guid": "b4a35cce-308a-4103-919d-f1351def8970", "sequenceNumber": 8108 }, "pairedItem": { "item": 0 } } ] }, "connections": { "OpenAI Chat Model": { "ai_languageModel": [ [ { "node": "AI Agent", "type": "ai_languageModel", "index": 0 } ] ] }, "AI Agent": { "main": [ [ { "node": "Service Desk Extract & Validate", "type": "main", "index": 0 } ] ] }, "Autotask Trigger": { "main": [ [ { "node": "tech triage exclude1", "type": "main", "index": 0 } ] ] }, "AI Agent1": { "main": [ [ { "node": "Format Troubleshooting for Internal Note", "type": "main", "index": 0 } ] ] }, "OpenAI Chat Model1": { "ai_languageModel": [ [ { "node": "AI Agent1", "type": "ai_languageModel", "index": 0 } ] ] }, "Wait": { "main": [ [ { "node": "Incident Check", "type": "main", "index": 0 } ] ] }, "OpenAI Chat Model2": { "ai_languageModel": [ [ { "node": "AI Agent2", "type": "ai_languageModel", "index": 0 } ] ] }, "AI Agent2": { "main": [ [ { "node": "NOC Extract & Validate", "type": "main", "index": 0 } ] ] }, "OpenAI Chat Model3": { "ai_languageModel": [ [ { "node": "AI Agent3", "type": "ai_languageModel", "index": 0 } ] ] }, "AI Agent3": { "main": [ [ { "node": "SOC Extract & Validate", "type": "main", "index": 0 } ] ] }, "When Executed by Another Workflow": { "main": [ [ { "node": "All Deciding Node (Robotic)", "type": "main", "index": 0 } ] ] }, "Wait1": { "main": [ [ { "node": "SOC Fast Track Tagger", "type": "main", "index": 0 } ] ] }, "Wait2": { "main": [ [ { "node": "Update a ticket1", "type": "main", "index": 0 } ] ] }, "Wait3": { "main": [ [ { "node": "SD Fast Track Tagger", "type": "main", "index": 0 } ] ] }, "Update a ticket2": { "main": [ [] ] }, "Update a ticket": { "main": [ [] ] }, "Create a ticket note": { "main": [ [] ] }, "Validation Check - SD": { "main": [ [ { "node": "AI Agent", "type": "main", "index": 0 } ], [ { "node": "Wait3", "type": "main", "index": 0 }, { "node": "Wait", "type": "main", "index": 0 } ] ] }, "Validation Check - SOC": { "main": [ [ { "node": "AI Agent3", "type": "main", "index": 0 } ], [ { "node": "Wait1", "type": "main", "index": 0 } ] ] }, "Validation Check - NOC": { "main": [ [ { "node": "AI Agent2", "type": "main", "index": 0 } ], [ { "node": "Wait2", "type": "main", "index": 0 } ] ] }, "SOC Check": { "main": [ [ { "node": "AI Agent3", "type": "main", "index": 0 } ] ] }, "SD Check": { "main": [ [ { "node": "Zoom Check", "type": "main", "index": 0 } ] ] }, "NOC Check": { "main": [ [ { "node": "Wulf NOC Triage Check", "type": "main", "index": 0 } ] ] }, "Wulf NOC Triage Check": { "main": [ [ { "node": "Call 'Workstation Diskspace Alert - SD vs Sales Auto Route'", "type": "main", "index": 0 } ], [ { "node": "AI Agent2", "type": "main", "index": 0 } ] ] }, "Wulf Triage Check": { "main": [ [ { "node": "All Deciding Node (Robotic)", "type": "main", "index": 0 } ], [ { "node": "Call 'Wulf Ticket Triage'", "type": "main", "index": 0 } ] ] }, "All Deciding Node (Robotic)": { "main": [ [ { "node": "SOC Check", "type": "main", "index": 0 }, { "node": "SD Check", "type": "main", "index": 0 }, { "node": "NOC Check", "type": "main", "index": 0 }, { "node": "If8", "type": "main", "index": 0 } ] ] }, "Clients triage exclude": { "main": [ [ { "node": "Wulf Triage Check", "type": "main", "index": 0 } ] ] }, "Ticket Category triage exclude": { "main": [ [ { "node": "CR check", "type": "main", "index": 0 } ] ] }, "tech triage exclude": { "main": [ [], [ { "node": "Ticket Category triage exclude", "type": "main", "index": 0 } ] ] }, "tech triage exclude1": { "main": [ [], [ { "node": "tech triage exclude", "type": "main", "index": 0 } ] ] }, "Incident Check": { "main": [ [ { "node": "AI Agent1", "type": "main", "index": 0 } ] ] }, "SOC Extract & Validate": { "main": [ [ { "node": "Validation Check - SOC", "type": "main", "index": 0 } ] ] }, "Format Troubleshooting for Internal Note": { "main": [ [ { "node": "Create a ticket note", "type": "main", "index": 0 } ] ] }, "NOC Extract & Validate": { "main": [ [ { "node": "Validation Check - NOC", "type": "main", "index": 0 } ] ] }, "Service Desk Extract & Validate": { "main": [ [ { "node": "Validation Check - SD", "type": "main", "index": 0 } ] ] }, "Zoom Check": { "main": [ [ { "node": "Call 'Zoom Branch Triage'", "type": "main", "index": 0 } ], [ { "node": "AI Agent", "type": "main", "index": 0 } ] ] }, "SD Fast Track Tagger": { "main": [ [ { "node": "Update a ticket", "type": "main", "index": 0 } ] ] }, "SOC Fast Track Tagger": { "main": [ [ { "node": "Update a ticket2", "type": "main", "index": 0 } ] ] }, "CR check": { "main": [ [ { "node": "Update a ticket3", "type": "main", "index": 0 } ], [ { "node": "Clients triage exclude", "type": "main", "index": 0 } ] ] } }, "active": true, "settings": { "executionOrder": "v1" }, "versionId": "a4b3abd3-2fe0-455d-84d4-ba0368a7d8ac", "meta": { "templateCredsSetupCompleted": true, "instanceId": "ad3e8921b8f3ec5eb0f5de9993c5671acfe1653760ce28a0ae49df7ec32eb653" }, "id": "GKyUfRQ8wPsOReDm", "tags": [] }