Your Problem Management Data Template

Freshservice
Your Problem Management Data Template

Your Problem Management Data Template

This template provides a comprehensive framework to map your problem lifecycle in Freshservice, allowing you to identify bottlenecks in root cause analysis and workaround creation. It outlines the essential attributes and activities needed to build a robust event log for process mining. By following this guide, you can streamline your extraction process and focus on improving IT service stability.
  • Critical attributes for deeper root cause analysis
  • Standardized activity mapping for the problem lifecycle
  • Technical guidance for Freshservice data extraction
New to event logs? Learn how to create a process mining event log.

Problem Management Attributes

These recommended data fields provide the necessary context for your event log to enable a detailed analysis of your problem management performance.
3 Required 10 Recommended 7 Optional
Name Description
Activity
ActivityName
The specific event or action performed on the problem record.
Description

This attribute describes the step within the process lifecycle, such as 'Problem Logged', 'Root Cause Identified', or 'Support Group Changed'. It is the core component for process discovery algorithms to map the sequence of work.

In analysis, this field determines the nodes in the process map and is essential for identifying rework loops, skipped steps, and process variants.

Why it matters

It defines the 'what' of the process execution and is mandatory for process map generation.

Where to get

Derived from Freshservice 'Activities' or 'Audit Log' endpoints.

Examples
Problem LoggedPriority UpdatedStatus Changed to Resolved
Problem Record
ProblemNumber
The unique alphanumeric identifier assigned to the problem record (e.g., PRB-10234).
Description

This attribute serves as the central Case ID for the process mining analysis. It uniquely identifies a specific problem investigation within Freshservice, linking all related activities, events, and changes. It is used to group individual audit log entries into a coherent process instance.

In analysis, this identifier allows users to drill down from high-level aggregations into specific problem journeys to understand the exact sequence of events that occurred.

Why it matters

It is the fundamental key for reconstructing the process flow and is required to uniquely identify each case.

Where to get

Freshservice API 'Problem' object, field 'display_id'.

Examples
PRB-10023PRB-10045PRB-11201
Timestamp
EventTimestamp
The exact date and time when the activity occurred.
Description

This attribute records when a specific event took place in the system. It allows the process mining engine to order events chronologically and calculate durations between steps.

In analysis, this data provides the basis for all time-based KPIs, such as throughput time, lead time analysis, and bottleneck identification.

Why it matters

It establishes the timeline of events, enabling cycle time calculation and process ordering.

Where to get

Freshservice API 'created_at' or 'updated_at' fields within the activity stream.

Examples
2023-10-15T08:30:00Z2023-10-15T09:15:22Z2023-10-16T14:00:00Z
Assigned Agent
AgentName
The name of the service desk agent currently assigned to the problem.
Description

This attribute identifies the individual responsible for investigating or resolving the problem. It enables resource analysis and performance monitoring.

In analysis, it helps identify workload distribution and specific individuals who may be overloaded or particularly efficient at RCA.

Why it matters

Key for resource analysis and organizational mining.

Where to get

Freshservice API 'Problem' object, field 'responder_id' (requires lookup to Agent table).

Examples
Alice SmithBob JonesSystem Admin
Department
DepartmentName
The department of the user who reported the problem or is primarily affected.
Description

This attribute identifies the business unit impacted by the problem.

In analysis, it helps segment the 'Critical Problem SLA Performance' to see if certain departments are receiving slower service than others.

Why it matters

Provides organizational context for the impact of problems.

Where to get

Freshservice API, via requester lookup to Department table.

Examples
FinanceHRIT
Is Reopened
IsReopened
A flag indicating if the problem record was ever moved from a closed state back to open.
Description

This boolean attribute is calculated by checking the activity history for transitions from a terminal state back to an active state.

In analysis, it supports the 'Problem Record Reopening Trends' dashboard, serving as a key quality indicator for the resolution process.

Why it matters

Primary indicator of false-positive resolutions and rework.

Where to get

Calculated from the event log (ActivityName).

Examples
truefalse
Linked Incidents
RelatedIncidentCount
The number of incident records linked to this problem.
Description

This attribute counts how many individual incidents are associated with the problem record. It serves as a proxy for the volume of user disruption.

In analysis, this is used for the 'Incident Linkage Density' KPI to verify if problems are actually reducing incident volume.

Why it matters

Indicates the magnitude of the problem's effect on the help desk.

Where to get

Freshservice API, count of 'associated_incidents' array.

Examples
05120
Priority
ProblemPriority
The priority level assigned to the problem (e.g., Low, Medium, High, Urgent).
Description

This attribute indicates the relative importance and urgency of the problem record. It is usually determined by a matrix of Impact and Urgency.

In analysis, this field is crucial for segmentation. It allows analysts to compare cycle times and SLA adherence between critical issues and minor defects.

Why it matters

Essential for filtering and prioritizing analysis on high-impact issues.

Where to get

Freshservice API 'Problem' object, field 'priority'.

Examples
LowMediumHighUrgent
Root Cause Category
RootCauseCategory
The classification of the underlying cause identified for the problem.
Description

This attribute categorizes why the problem occurred, such as 'Software Bug', 'Configuration Error', or 'Human Error'. It is populated after the RCA phase.

In analysis, this is used for the 'Root Cause Categorization Quality' dashboard to identify systemic weaknesses in the infrastructure.

Why it matters

Essential for trend analysis and identifying areas for proactive improvement.

Where to get

Freshservice API 'Problem' object. Often a custom field or 'root_cause' text field depending on configuration.

Examples
Software FailureConfiguration ErrorHardware Malfunction
SLA Breached
IsSlaBreached
A flag indicating if the problem record missed its service level agreement target.
Description

This boolean attribute is true if the problem resolution time exceeded the defined policy.

In analysis, this drives the 'Critical Problem SLA Performance' dashboard, helping identify which teams or categories struggle most with timeliness.

Why it matters

Direct measure of process compliance and performance.

Where to get

Freshservice API, derived from 'sla_policy' or 'sla_breached' flags.

Examples
truefalse
Status
ProblemStatus
The current lifecycle state of the problem (e.g., Open, Change Requested, Resolved).
Description

This attribute tracks the progress of the problem through its workflow. Changes in this field trigger standard process activities.

In analysis, it serves as the primary filter for distinguishing between active and completed work and allows for WIP (Work In Progress) analysis.

Why it matters

Defines the state of the case and is used to calculate flow statistics.

Where to get

Freshservice API 'Problem' object, field 'status'.

Examples
OpenPending ChangeResolvedClosed
Support Group
SupportGroup
The technical team or group assigned to handle the problem.
Description

This attribute represents the team ownership of the problem record. Transfers between groups are a major source of delay in Problem Management.

In analysis, this field is used to generate the 'Support Group Transfer Heatmap' and identify ping-pong behavior between teams.

Why it matters

Critical for analyzing handovers and identifying siloed bottlenecks.

Where to get

Freshservice API 'Problem' object, field 'group_id' (requires lookup to Groups table).

Examples
Database TeamNetwork OperationsApplication Support
Time to RCA
TimeToRootCause
The duration from problem creation to the identification of the root cause.
Description

This duration attribute is calculated by measuring the time difference between the 'Problem Logged' event and the 'Root Cause Identified' event.

In analysis, it feeds the 'Mean Time to Root Cause Identification' KPI, highlighting the efficiency of the diagnostic phase.

Why it matters

Measures the speed of the investigation phase specifically.

Where to get

Calculated from event timestamps.

Examples
48 hours3 days45 minutes
Due Date
DueDate
The target date by which the problem record is expected to be resolved.
Description

This attribute holds the deadline for the problem, often set by SLA policies or manually by a manager.

In analysis, comparing this date to the actual resolution date provides insight into planning accuracy and realistic expectation setting.

Why it matters

Reference point for on-time delivery analysis.

Where to get

Freshservice API 'Problem' object, field 'due_by'.

Examples
2023-12-31T17:00:00Z
Impact
ImpactLevel
The measure of the effect the problem has on business processes.
Description

This attribute quantifies the scope of the issue, often used in conjunction with Urgency to determine Priority.

In analysis, it helps prioritize which process bottlenecks are affecting the most critical business functions.

Why it matters

Used for weighting analysis results by business criticality.

Where to get

Freshservice API 'Problem' object, field 'impact'.

Examples
LowMediumHigh
Impacted Asset
AssociatedAsset
The primary configuration item (CI) or asset linked to the problem.
Description

This attribute identifies the specific hardware or software asset that is the subject of the investigation.

In analysis, it allows for 'Root Cause Categorization Quality' by asset type, revealing if certain devices or software versions are prone to defects.

Why it matters

Connects process performance to infrastructure components.

Where to get

Freshservice API, 'associated_assets' field.

Examples
Server-01Payroll ApplicationCore Switch A
Last Data Update
LastExtractionTime
The timestamp indicating when the data was extracted from Freshservice.
Description

This attribute marks the freshness of the dataset used for analysis. It helps users understand if they are looking at real-time data or a snapshot from the past.

In analysis, it is used as a reference point for calculating current open durations for active cases.

Why it matters

Provides context on data latency and reliability.

Where to get

System time at the moment of ETL execution.

Examples
2023-11-01T12:00:00Z
Linked Change Request
ChangeRequestId
The identifier of the change request created to fix the problem.
Description

This attribute contains the ID of a Change Request associated with the problem record for implementing a permanent fix.

In analysis, it is essential for the 'RCA to Change Transition Time' KPI, enabling the measurement of time lost between finding a cause and acting on it.

Why it matters

Links the Problem process to the Change Management process.

Where to get

Freshservice API, 'associated_change_request' field.

Examples
CHG-2001CHG-2045
Source System
SourceSystem
The name of the system where the data originated.
Description

This static attribute identifies the origin of the dataset, which is 'Freshservice'. In multi-system environments, it helps distinguish records coming from different ITSM tools or instances.

In analysis, this is primarily used for filtering or grouping when combining data from multiple sources.

Why it matters

Ensures data lineage and traceability in multi-system process mining implementations.

Where to get

Hardcoded value during extraction.

Examples
Freshservice
Workaround Description
WorkaroundNotes
The text describing the temporary fix or workaround.
Description

This attribute contains the details of the temporary solution provided. Its presence indicates that a workaround was successfully published.

In analysis, the timestamp associated with filling this field drives the 'Average Workaround Lead Time' KPI.

Why it matters

Critical for measuring mitigation speed versus full resolution speed.

Where to get

Freshservice API 'Problem' object, field 'workaround'.

Examples
Restart service manuallyClear browser cacheUse alternative VPN endpoint
Required Recommended Optional

Problem Management Activities

Capture these essential process milestones and status changes to visualize the end to end journey of problem records within your service desk.
7 Recommended 8 Optional
Activity Description
Change Request Associated
The linkage of a Change record to the Problem record, signalling the start of the remediation phase. Captured via the 'Association with Change' system event.
Why it matters

Vital for the Change Request Bottleneck Monitor. Measures the hand-off from Problem Management to Change Management.

Where to get

Activity Stream: 'Association with Change' event.

Capture

Logged when a Change ID is linked

Event type explicit
Permanent Fix Applied
Represents the implementation of the final solution. In Freshservice, this is typically inferred when the status moves to 'Solved' or 'Resolved'.
Why it matters

Calculates the Permanent Fix Implementation Delay. Marks the end of the technical rectification work.

Where to get

Activity Stream: Status change to 'Solved' or 'Resolved'.

Capture

Compare status field before/after

Event type inferred
Problem Closed
The final lifecycle event where the record is locked and considered inactive. Captured by the status transition to 'Closed'.
Why it matters

Defines the absolute end of the process instance. Required for calculating total cycle time.

Where to get

Activity Stream: Status change to 'Closed'.

Capture

Logged when status changes to Closed

Event type explicit
Problem Logged
The initial creation of the problem record in the system. This event is explicitly captured in the Freshservice audit log when a new problem ticket is saved.
Why it matters

Marks the start of the process instance. It is the anchor point for calculating all lead times and cycle times.

Where to get

Freshservice Activity Stream or Tickets API (created_at timestamp).

Capture

Logged when transaction New Problem is executed

Event type explicit
Root Cause Identified
The point in time when the root cause text field or analysis section is populated. Captured by identifying the first update to the 'Root Cause' field from a null state.
Why it matters

The primary milestone for RCA Lead Time Analysis. It marks the transition from investigation to solution design.

Where to get

Activity Stream: Update to 'root_cause' or 'analysis' fields.

Capture

Compare root_cause field before/after update

Event type inferred
Support Group Assigned
Routing the problem record to a specific technical team or assignment group. Captured by monitoring changes to the 'Group' field in the ticket history.
Why it matters

Essential for the Support Group Transfer Heatmap. Tracking this reveals ping-pong effects and excessive handovers between teams.

Where to get

Activity Stream: Updates to 'group_id' or 'group_name' field.

Capture

Logged when Group field is updated

Event type explicit
Workaround Published
The addition of a temporary solution to the problem record, often marked as a 'Workaround' note or field. Used to calculate Workaround Publication Velocity.
Why it matters

Measures how quickly the team mitigates impact. Essential for the Average Workaround Lead Time KPI.

Where to get

Activity Stream: Update to 'workaround' field or creation of a note marked as Solution/Workaround.

Capture

Logged when Workaround field is populated

Event type explicit
Agent Assigned
The assignment of a specific individual responder to the problem record. Captured explicitly when the 'Agent' field is populated or updated.
Why it matters

Indicates when a resource has officially picked up the work. Helps analyze resource allocation by priority.

Where to get

Activity Stream: Updates to 'responder_id' field.

Capture

Logged when Agent field is updated

Event type explicit
Asset Linked
The association of a Configuration Item (CI) or Asset to the problem record. This helps identify the 'Affected Business Service' or 'Impacted Configuration Item'.
Why it matters

Links the abstract problem to physical or logical infrastructure. Crucial for Root Cause Categorization Quality analysis.

Where to get

Activity Stream: 'Association with Asset' event.

Capture

Logged when an asset is attached to the record

Event type explicit
Note Added
General activity capturing when a public or private note is added to the record. Represents ongoing collaboration or updates.
Why it matters

Can indicate active work even if status hasn't changed. Useful for identifying 'active waiting' periods.

Where to get

Activity Stream: 'Note added' event.

Capture

Logged when a comment is posted

Event type explicit
Priority Updated
A change to the urgency or impact level of the problem record. Captured via the audit trail of the 'Priority' field.
Why it matters

Critical for analyzing SLA breaches and filtering the Critical Problem SLA Performance dashboard.

Where to get

Activity Stream: Updates to 'priority' field.

Capture

Logged when Priority field is modified

Event type explicit
Problem Reopened
A transition from a 'Resolved' or 'Closed' state back to an 'Open' state. Indicates the fix failed or was rejected.
Why it matters

The core metric for the Problem Record Reopening Trends dashboard. High rates indicate poor quality RCA or fixes.

Where to get

Activity Stream: Status change from [Closed/Solved] to [Open/In Progress].

Capture

Compare status field before/after

Event type inferred
Problem Task Completed
The completion of a sub-task attached to the problem record. This is often used to track Post Implementation Reviews (PIR) or specific investigation steps.
Why it matters

Supports the Post Review Completion Audit dashboard by tracking if review tasks are being closed.

Where to get

Activity Stream: 'Task' status change to Closed/Completed.

Capture

Logged when a linked Task is marked complete

Event type explicit
SLA Breached
A system-generated event indicating the 'Due By' time was exceeded. Freshservice logs specific SLA violation markers.
Why it matters

Directly supports Critical Problem SLA Performance analysis. Highlights compliance failures.

Where to get

Activity Stream: SLA violation system log.

Capture

Logged when system SLA monitor triggers

Event type explicit
Status Pending Change
A status transition indicating the problem is waiting for a Change Request to be implemented. Inferred from the status field changing to 'Change Requested' or similar.
Why it matters

Identifies wait time where the Problem Management team is dependent on external Change processes.

Where to get

Activity Stream: Status change to ID representing 'Change Requested'.

Capture

Compare status field before/after

Event type inferred
Recommended Optional

Extraction Guides

How to get your data from Freshservice