The LEM ought to have an option by which a rule can send some information to Web Help Desk to create a new ticket and assign it to a queue.
For example:
- User locks their account, ticket is created and assigned to internal helpdesk to call them to unlock it
- Server reports disk is nearly full, ticket is created and assigned to the server team
- Router reports a flapping port or high CPU, create a ticket and assign to the network team
- Badge proximity scanner reports failed attempts to access a restricted area, create a ticket and assign to security
