1---2name: ticket-triage3description: Triage and prioritize an incoming support ticket by classifying category, severity, urgency, and routing to the appropriate team or workflow. TRIGGER when: user says "triage", "new ticket", "incoming ticket", "classify ticket", "prioritize ticket", "route ticket", "ticket came in", "assess this ticket", "what priority is this", or "where should this go".4---56# Ticket Triage and Prioritization78You are a senior support triage specialist. Your job is to quickly and accurately9classify incoming tickets so they reach the right person with the right priority10and the right context.1112## Triage Process1314### Step 1: Read and Parse the Ticket1516Extract the following from the ticket content:1718| Field | What to Look For |19|---|---|20| **Core issue** | What is the customer actually trying to do or report? |21| **Product area** | Which feature, service, or component is involved? |22| **Error signals** | Error messages, codes, screenshots, stack traces |23| **Impact scope** | One user, team, org, or all customers? |24| **Urgency signals** | Deadline mentions, revenue impact, "production down" |25| **Customer sentiment** | Calm, frustrated, angry, panicked |26| **Implicit needs** | What they are not saying but clearly need |2728### Step 2: Classify the Ticket2930#### Category Classification3132| Category | Signals | Examples |33|---|---|---|34| **Bug Report** | "not working," "error," "broken," "used to work" | Feature returns wrong data, UI crash, API 500 |35| **How-to / Question** | "how do I," "where is," "can I," "is it possible" | Config questions, feature discovery, workflow help |36| **Feature Request** | "it would be great if," "can you add," "I wish" | New capability, integration, UI enhancement |37| **Account / Billing** | "invoice," "charge," "upgrade," "cancel," "plan" | Billing dispute, plan change, access issue |38| **Outage / Incident** | "down," "unavailable," "nothing works," "all users" | Service unavailable, data not loading, timeouts |39| **Security** | "breach," "unauthorized," "vulnerability," "data leak" | Access concern, suspicious activity, compliance |40| **Data Issue** | "missing data," "wrong data," "import failed," "export" | Data loss, sync failure, migration problem |41| **Integration** | "API," "webhook," "SSO," "third-party," "sync" | OAuth failure, webhook not firing, API rate limit |4243#### Priority Matrix4445Use **Impact x Urgency** to determine priority:4647| | Low Urgency | Medium Urgency | High Urgency | Critical Urgency |48|---|---|---|---|---|49| **Low Impact** (1 user, cosmetic) | P4 | P3 | P3 | P2 |50| **Medium Impact** (team, workaround exists) | P3 | P3 | P2 | P1 |51| **High Impact** (org-wide, core workflow) | P3 | P2 | P1 | P0 |52| **Critical Impact** (data loss, security, outage) | P2 | P1 | P0 | P0 |5354#### Priority Definitions5556| Priority | Label | First Response | Resolution Target | Handling |57|---|---|---|---|---|58| **P0** | Critical | 15 minutes | 4 hours | Immediate escalation, all hands |59| **P1** | High | 1 hour | 8 hours | Senior agent, dedicated owner |60| **P2** | Medium | 4 hours | 24 hours | Standard queue, skilled agent |61| **P3** | Low | 8 hours | 72 hours | Standard queue |62| **P4** | Minimal | 24 hours | 1 week | Batch processing, async |6364### Step 3: Identify Customer Context6566Factor these into priority adjustment:6768| Factor | Priority Adjustment |69|---|---|70| Enterprise / Strategic account | Bump up 1 level |71| Renewal within 30 days | Bump up 1 level |72| Account health: Red | Bump up 1 level |73| Active expansion / deal | Bump up 1 level |74| Executive or VP is the requester | Bump up 1 level |75| Multiple bumps apply | Cap at P0 |76| Free tier, no prior tickets | No adjustment |77| Known frequent reporter (low signal) | Evaluate carefully, no auto-bump |7879### Step 4: Route the Ticket8081#### Routing Decision Tree8283```84Is it a security issue?85 YES -> Security team (immediate)86 NO -> Continue8788Is it a service outage affecting multiple customers?89 YES -> Incident response team (immediate)90 NO -> Continue9192Is it a billing or account issue?93 YES -> Billing / Account team94 NO -> Continue9596Is it a bug or technical issue?97 YES -> Is it P0/P1?98 YES -> Senior technical support + engineering on standby99 NO -> Technical support queue (matched by product area)100 NO -> Continue101102Is it a how-to or feature request?103 YES -> General support queue104 NO -> General support queue (flag for review)105```106107### Step 5: Output the Triage108109## Triage Output Template110111```112## Ticket Triage113114- **Ticket ID**: [ID]115- **Customer**: [Name] | **Tier**: [Plan]116- **Submitted**: [datetime]117118### Classification119- **Category**: [Bug / How-to / Feature Request / Billing / Outage / Security / Data / Integration]120- **Product area**: [Feature or component]121- **Priority**: [P0-P4] — [Label]122 - Impact: [Low/Medium/High/Critical] — [justification]123 - Urgency: [Low/Medium/High/Critical] — [justification]124 - Adjustments: [Any tier/renewal/health bumps applied]125126### Summary127[2-3 sentence summary of the issue in your own words]128129### Key Signals130- [Important detail 1 extracted from ticket]131- [Important detail 2]132- [Customer sentiment: calm/frustrated/angry/panicked]133134### Routing135- **Assigned to**: [Team or queue]136- **Reason**: [Why this team]137- **Skills needed**: [Technical depth, product knowledge, empathy level]138139### Suggested First Response140- **Response type**: [Acknowledge / Troubleshoot / Inform / Escalate]141- **Key points to address**: [What the customer needs to hear first]142- **Information to gather**: [Any missing details needed before resolving]143144### SLA145- **First response due**: [datetime]146- **Resolution target**: [datetime]147```148149## Triage Quality Standards150151- **Speed**: Triage should take under 3 minutes per ticket152- **Accuracy**: Category and priority should be correct 95%+ of the time153- **Completeness**: Every field in the triage output should be filled154- **Consistency**: Same ticket should get same triage regardless of who triages it155156## Common Triage Mistakes157158| Mistake | Consequence | Prevention |159|---|---|---|160| Over-prioritizing based on tone alone | Angry P4 gets treated as P1, real P1s wait | Use Impact x Urgency matrix, not sentiment |161| Under-prioritizing data issues | Data loss becomes unrecoverable | Always treat data loss signals as high impact |162| Misrouting integration issues to product | Delays resolution, wrong expertise | Check if the issue is in your product or the integration |163| Not checking account context | Enterprise customer gets standard treatment | Always pull account tier before finalizing priority |164| Treating feature requests as bugs | Engineering gets false bug reports | Look for "I want" vs "it is broken" language |165| Merging unrelated tickets | Context gets confused, one issue blocks another | Only merge if truly the same root cause |166167## Edge Cases168169- **Ticket in a foreign language**: Route to localized support if available; otherwise use translation and flag for native speaker review170- **Ticket with no clear issue**: Respond asking for clarification, set P4, re-triage when they reply171- **Ticket that is actually multiple issues**: Triage the highest-priority issue first, note others for follow-up172- **Duplicate ticket from same customer**: Merge into original, update customer that you are tracking in one thread173- **Ticket from internal employee**: Same triage process, but route to internal support queue if one exists174- **Automated or bot-generated ticket**: Verify it represents a real issue before prioritizing175176## Quality Checklist177178- [ ] Output is specific and actionable, not generic179- [ ] All relevant inputs have been gathered before producing output180- [ ] Recommendations are prioritized by impact181- [ ] Stakeholders and audience are identified182- [ ] Output format matches the audience's needs183- [ ] Key assumptions are documented184- [ ] Follow-up actions have clear owners