Triage is the first piece of automation we set up after the foundations are in place. It's the highest-leverage thing you can configure, because every ticket your helpdesk receives goes through it. Get triage right and the rest of the system gets cleaner inputs to work with — assignment, routing, queues, lifecycles all key off the values triage assigns.
Problem: A new ticket arrives in the helpdesk. Its priority is whatever the customer (or the helpdesk's default) said. Its type is unclassified or wrong. Its category is blank. Its assigned queue is whatever default the helpdesk picked. Someone has to read the ticket, decide what it really is, and set the right values — every time, on every ticket. That someone is usually a dispatcher, and it's the most repetitive job in the queue.
Horizon's answer: Triage. As soon as Horizon ingests a ticket, the configured triage policy reads the ticket content, runs it through an AI-powered flow, and recommends values for the fields you care about — Priority, Type, Status, Queue, whatever you've configured. Recommendations get applied back to the helpdesk automatically (or held for review, depending on configuration).
The result: every ticket arrives already classified. Dispatchers stop reading every new ticket. Routing rules and assignment policies have correct field values to key off. The work that used to take a person an hour a day takes the system a few seconds per ticket.
Open the admin panel and navigate to Components → Triage. You'll find:
| Page | What it does |
|---|---|
| Triage Policies | the triage flows themselves — one or more, scoped by conditions |
| Triage Actions | the catalog of actions a triage policy can take (set Priority, set Type, set Queue, etc.) |
| Triage Policy Hints | context you give the AI to bias its decisions (per company, per customer, per picklist value) |
| Training Imports | historical tickets imported with known correct classifications, used to train and tune the model |
| Triage Logs | per-ticket audit trail — what the AI saw, what it recommended, what it committed |
You'll spend most of your setup time on Triage Policies and Hints. The other pages are reference, training data, and audit.
A triage policy is made of steps. Each step is one classification — "figure out the priority", "figure out the type", "figure out which queue". Steps run in sequence. Each step:
When all steps complete, the triage policy produces a change set — the proposed field changes for the ticket. That change set is then committed back to the helpdesk via the integration.
Because steps run in sequence and earlier steps' outputs inform later ones, the order matters. Classify type first, then priority can use the type as context. Classify queue last, once everything else is known.
A reasonable first triage policy classifies the three highest-leverage fields: Type, Priority, and Queue. You can layer on more later.
After creating the steps, send a test ticket through. The Triage Logs page will show you exactly what the AI saw, what it picked, and the confidence scores.
Problem: Your AI triage works well in general but gets a few cases consistently wrong. "All tickets from CompanyX are project work, never service desk." "Anything mentioning Microsoft Defender is always Type=Security." "The 'Triage' picklist value should never be picked because we don't use it."
Horizon's answer: Hints. Three flavors:
| Hint type | What it does |
|---|---|
| Customer hints | bias triage decisions for tickets from a specific customer / contact |
| Company hints | bias triage decisions for tickets from a specific company |
| Picklist hints | guide the AI on what a specific picklist value means or when to pick it |
There are also picklist exclusions at the policy level — values you've told the system to never pick at all, regardless of what the ticket content suggests.
Hints are how you fix triage misclassifications without rewriting the whole policy. Add a hint, send a test ticket, watch the log. If the hint moves the AI toward the right answer, you're done.
Problem: Your account has thousands of historical tickets that were already correctly classified by humans. The AI doesn't know about them. You're starting cold.
Horizon's answer: Training imports. Upload (or sync) historical tickets with their known correct classifications. The AI uses them as training signal, so it starts your account with a baseline of how this MSP actually classifies things rather than a generic default.
Training imports are managed under Training Imports. The exact import format and refresh cadence depends on your helpdesk and how Horizon is configured to source the historical data.
You don't have to use training imports to ship triage. Most accounts go live with a baseline policy and a handful of hints, then layer in training data as the model needs to get sharper.
Triage isn't fire-and-forget. Plan to spend the first two weeks watching the Triage Logs page after go-live and tightening the policy:
After the first two weeks, the touch frequency drops dramatically. Most mature accounts revisit triage once a quarter at most.
Triage is the first thing in the ticket lifecycle. Every other lifecycle action — auto-assign, scheduled todo creation, routing — happens after triage commits. If triage fails or stalls, the rest of the lifecycle stalls with it. Triage Logs is your first stop when "the system didn't do anything to this ticket" tickets land in your queue.
Tip: Don't over-design the first triage policy. Three steps (Type, Priority, Queue) and a catch-all rule is the right starting point for almost every account. You'll add hints, exclusions, and additional steps as you watch real tickets flow through. Triage tuning is observational — you can't predict the edge cases from a whiteboard.