The Challenge: High ticket volumes, manual enrichment delays, and inaccurate team routing caused long handling times and inflated operational costs.
The Solution: Built a real-time event-driven pipeline to automate ticket creation, context enrichment, and remediation playbook execution.
The Result: Slashed ticket handling times by 45%, increased ticket assignment accuracy to 95%, and dropped costs per ticket by 20%.
The Network Operations Centre (NOC) was bogged down by a manual ticket lifecycle. When network faults occurred, engineers spent valuable time manually opening tickets, hunting for correlating alarms, routing issues to resolver groups, and running basic remediation steps. This led to high handling times (45–60 minutes per ticket) and a low First-Contact Resolution (FCR) rate of 55%.
Instead of relying on human engineers to triage infrastructure alarms, we realized we could use an event-driven, automated toolkit to turn raw fault data into fully contextualized, self-healing tickets instantly.
We deployed a modern automation framework to manage the entire ticket lifecycle from creation to closure:
Data Intake: Used Kafka for high-volume intake and fan-out of network fault signals.
Context & Routing: Configured Splunk Core + ITSI to de-duplicate event keys, establish suppression windows, and map routing matrices based on skills and rosters.
ITSM Integration: Programmed BMC Helix ITSM to automatically create, update, manage SLAs, and close tickets in real time.
Action Execution: Linked Splunk SOAR + Ansible AWX to trigger automated action playbooks, rollback procedures, and approval workflows.
Governance: Implemented Git CI/CD to handle all system workflows as code with strict guardrails.