Designing SCADA Alarm Callouts That Actually Wake Someone Up
Remote notification is a delivery channel, not an alarm system. Picking which alarms page out, escalation timers that match humans, and proving delivery.
Articles
Field-oriented references for HMI/SCADA systems, industrial communication, alarms, tags, historians, and project delivery.
Remote notification is a delivery channel, not an alarm system. Picking which alarms page out, escalation timers that match humans, and proving delivery.
Turning two limit switches and a travel timer into honest valve state: transit handling, discrepancy alarms, and catching a slowing actuator early.
Designing rate-of-rise and rate-of-fall alarms: window length, noise filtering, units, and the quality gating that stops them screaming on comms recovery.
Alarm help text is written once during rationalization and never read again. What belongs in cause, consequence and response for a 02:00 operator.
During a flood a newest-first summary pushes the critical alarm off screen, and a filter left on erases it. Picking a default sort that holds.
Practical HMI notes for using color, shape, text, and state rules so operator screens stay readable during abnormal conditions.
Intermittent bad quality usually starts at a switch port. Which SNMP objects are worth polling, why counters only mean anything as rates, and trap gaps.
A maintenance bypass is an operating state, not a comment field. Tag naming, ISA-18.2 out-of-service handling, expiry rules, and the audit trail.
Wiring horn silence to the acknowledge tag corrupts the event log from day one. Splitting silence, acknowledge, reset and shelve under ISA-18.2.
Popup context passing for reusable faceplates: one stable equipment key, command binding that fails closed, and telling a broken binding from bad quality.
Building an alarm priority matrix that ranks by consequence and operator response time, with the EEMUA 191 targets that keep high priority rare.
Standing alarms are acknowledged but still active. Reviewing them against the ISA-18.2 stale-alarm metric before they become summary wallpaper.
Commissioning OPC UA Alarm & Condition subscriptions: event filters, the Retain flag, ConditionRefresh, and the failures that appear on reconnect.
Why setpoint entry fails on the acknowledgment path, splitting display limits from PLC hard limits, and the tests that catch silent rounding.
A forced valve and a substituted flow reading are different overrides, and one Manual bit can't tell them apart. Logging that survives a server restart.
OPC DA quality words, OPC UA StatusCodes, DNP3 flags — and how to display, alarm and historize them so a dead signal never reads as a valid value.
One shared bit for acknowledge and reset is how alarms vanish while the fault is live. Separating active, latch, ack, return-to-normal and reset.
Filtering an alarm banner is not suppressing an alarm, and ISA-18.2 draws that line for a reason. What the default view owes the operator during a flood.
One screen says the pump is stopped, the report says faulted. The fix is a derived status tag with a written priority order that every client shares.
Setting on-delays, off-delays, debounce and deadband from process behaviour and ISA-18.2 — filtering nuisance alarms without hiding the first warning.
Alarm floods bury the initiating cause. Preserving first-out, trusting sequence-of-events timestamps, and stopping comms failures becoming floods.
How to show permissives, interlocks, inhibits, bypasses, command readiness, and first-out causes on practical HMI screens.
Running alarm rationalization sessions that produce usable priorities, causes and operator response guidance instead of another unread spreadsheet.
Mode is who may command the equipment; state is what it is doing. SEMI E30's control state model splits them — here is how to split the HMI to match.
S5F1 carries ALCD, ALID and ALTX. Bit 8 of ALCD is set-versus-clear, and dropping it leaves an MES alarm list that never goes green. Plus the S5F5/S5F6 recovery after a host restart.
How raw SCADA, HMI and protocol values become useful machine state, process state, alarm state and control state, and where each one is decided.
A practical checklist for designing HMI faceplates that operators can use quickly, consistently, and safely during normal operation and troubleshooting.
How ISA-18.2 splits shelving, designed suppression, out-of-service and interlock bypass — and configuring them so every hidden alarm keeps an owner.
A short hands-on walkthrough that turns one temperature signal into alarm state, switch action, HMI feedback, and an event log using the StateX tutorial.
Practical alarm design mistakes that create nuisance alarms, floods, operator confusion, and poor incident response.