1. A method, comprising: analyzing, by a computer device, data associated with tickets generated in a managed environment; generating, by the computer device, a suggested rule change based on the analyzing; and receiving, by the computer device, an acceptance or denial of the suggested rule change.