Goal: State a goal for this ticket
Permission: Needed permissions
Raw Message: Ticket subject as it comes in
Occurrence: When or how often does it occur
Observation: What to look for
Actions: Actions to take
Source: What the source is
Tier 2 Actions
What tier two should do.