It ships with 27 ready-made rules, inactive, for the most common cases: the same device failing again and again; Wi-Fi, printing, power or telephony issues at the same location; services such as email, VPN, login, backup and digital certificates; recurring workarounds; and every critical incident. The Test button shows what the rule would have caught in your tickets, without creating anything, and you turn on only what makes sense.

Counting can be split by item, location, category, technician group, requester or department: with a minimum of 5, five Wi-Fi incidents at the Downtown branch and five at the North branch open two Problems, one per branch. A minimum number of distinct requesters keeps a single person from raising the alarm, and a minimum interval prevents repeated Problems. The rule's actions define how the Problem is created: title, template, category, urgency, impact, technician group, technician and observer group. Root cause analysis follows GLPI's normal flow, and the Logs tab shows which rule opened each Problem, for which group and with which tickets.