Designing SCADA Alarm Callouts That Actually Wake Someone Up
Remote notification is a delivery channel, not an alarm system. Picking which alarms page out, escalation timers that match humans, and proving delivery.
Articles
Practical SCADA notes
Field-oriented references for HMI/SCADA systems, industrial communication, alarms, tags, historians, and project delivery.
Why Your Thermocouple Reads 3 Degrees High in the Panel and the RTD Doesn't
Where linearization and cold-junction compensation happen between sensor and SCADA tag, and why the wrong place quietly biases the reading you trust.
Filtering a Noisy Analog Input Without Hiding the Process You Need to See
Smoothing a jittery 4-20 mA reading with first-order and moving-average filters, where the filter belongs, and why the wrong tag delays your alarm.
Rate-of-Change Alarms: Catch a Runaway Before the High-High Ever Trips
Designing rate-of-rise and rate-of-fall alarms: window length, noise filtering, units, and the quality gating that stops them screaming on comms recovery.
Why Your Standby Pump Didn't Start: Getting Lead/Lag/Standby Rotation Right
Building lead/lag/standby pump rotation so duty sharing, standby failover and role swaps stay predictable — and visible to the operator at 3am.
What a Redundant PLC Actually Protects — and How to Commission One
A hot-standby pair earns its cost only if switchover is proven and sync loss is alarmed. What CPU redundancy covers, and testing both directions.
How to Run a 4-20 mA Loop Check That Catches Swapped Transmitters
Running loop checks from field instrument through PLC to SCADA so every 4-20 mA point is proven end to end, and swapped transmitters surface early.
How OPC UA Republish Recovers Dropped Notifications Before They Become Trend Gaps
Sequence numbers and the Republish service turn a dropped notification into zero data loss — but only if the client watches them and the queue is sized.
Why a Dead Transmitter Still Reads a Valid Number, and How to Catch It
A broken wire or saturated loop still scales to a plausible value. Detecting over-range, under-range and stuck 4-20 mA inputs before an operator acts.
HMI Command Reset Behavior After PLC Restart
Designing and testing HMI command bits, acknowledgements and startup recovery so a stale command can't fire after a PLC or controller restart.
Alarm Help Text That Survives 02:00: Cause, Consequence, and the Action You Actually Want
Alarm help text is written once during rationalization and never read again. What belongs in cause, consequence and response for a 02:00 operator.
Newest-First Alarm Summaries Hide the Critical Alarm During a Flood
During a flood a newest-first summary pushes the critical alarm off screen, and a filter left on erases it. Picking a default sort that holds.
HMI Color and Shape Semantics for Operator Screens
Practical HMI notes for using color, shape, text, and state rules so operator screens stay readable during abnormal conditions.
Why Your HMI Trend Draws a Flat Line Through a Ten-Minute Outage
Held values, dropped quality codes and late samples inserted at arrival time each make a trend lie after an outage. Working out which one you have.
Your HMI Breadcrumb Should Follow the Plant, Not the Project Tree
Making an HMI screen state its own identity: ISA-101.01 display hierarchy as the breadcrumb skeleton, command labels that show scope, and testing copied screens.
Your HMI Says Step 40 — It Should Say What Step 40 Is Waiting For
A sequence screen showing only a step number sends the operator hunting across four displays. Separate state, step, and hold reason, and latch the reason.
Why an OPC UA Setpoint That Browses Writable Still Rejects the Operator
AccessLevel vs UserAccessLevel vs WriteMask: why a setpoint that browses writable returns BadUserAccessDenied, and testing with the production identity.
The Bypass Nobody Cleared: Making Maintenance Overrides Visible in SCADA
A maintenance bypass is an operating state, not a comment field. Tag naming, ISA-18.2 out-of-service handling, expiry rules, and the audit trail.
Alarm Horn Silence Is Not Acknowledgement — Split the Buttons
Wiring horn silence to the acknowledge tag corrupts the event log from day one. Splitting silence, acknowledge, reset and shelve under ISA-18.2.
Why Is This Button Greyed Out? Making HMI Disable Reasons Answer That
How to split HMI button logic into authorization, mode, permissives, interlocks and quality — and show operators the actual reason a command is blocked.
How to Keep a Reusable HMI Faceplate From Commanding the Wrong Pump
Popup context passing for reusable faceplates: one stable equipment key, command binding that fails closed, and telling a broken binding from bad quality.
Which OPC UA Name Should Your SCADA Store: NodeId, BrowseName, or DisplayName?
NodeIds regenerate, browse paths move, DisplayName is a label. Picking the reference your HMI and historian store so firmware doesn't blank a screen.
How to Scale HMI Trend Pens So the Screen Doesn't Lie to the Operator
Take trend axis defaults from OPC UA EURange, not 0-100. Clamping at 100% hides NAMUR NE 43 fault currents that land at -2.5% and 106.25%, plus alarm lines and commissioning checks.
Historian Trend Annotations: Store Operator Events as Events, Not Fake Tags
Recording calibration, manual mode and bypass windows as event records separate from the sampled stream, joined back by asset ID and time window.
Pull the Cable: Proving an Industrial Ethernet Ring Actually Fails Over
A commissioning sequence for RSTP, MRP and PRP rings that measures what operators see: convergence time, dropped subscriptions, half-open sockets.
Which OPC UA Timeout Actually Killed Your Session?
The secure channel, the session and the subscription each expire on their own clock. Which one fired tells you to blame the firewall, load or keepalive.
Why Every Alarm Ends Up High Priority, and How to Rank Them by Response Time Instead
Building an alarm priority matrix that ranks by consequence and operator response time, with the EEMUA 191 targets that keep high priority rare.
Acknowledged Isn't Cleared: How to Run a Standing Alarm Review
Standing alarms are acknowledged but still active. Reviewing them against the ISA-18.2 stale-alarm metric before they become summary wallpaper.
Why Polling a SCADA Tag Faster Won't Catch That One-Scan Pulse
A one-scan reject pulse lives for 20 ms. Poll every 250 ms and SCADA never sees it. Matching polling rates to PLC scan time, driver and historian.
A Trend Cursor Only Proves What the Clocks Agree On
HMI, historian, PLC log and alarm list stamp one event seconds apart. Where each timestamp is born, and which one to trust during an incident.
How to Test SCADA Server Switchover Without Fooling Yourself
A green redundancy icon proves the heartbeat works and nothing else. What to check on clients, alarms, historian and background jobs during a failover.
The HMI Accepted the Setpoint. The PLC Didn't.
Why setpoint entry fails on the acknowledgment path, splitting display limits from PLC hard limits, and the tests that catch silent rounding.
A Manual Override You Can't Audit Is a Fault You Can't Find
A forced valve and a substituted flow reading are different overrides, and one Manual bit can't tell them apart. Logging that survives a server restart.
Bad Quality Isn't Zero: Handling SCADA Tag Quality Without Lying to the Operator
OPC DA quality words, OPC UA StatusCodes, DNP3 flags — and how to display, alarm and historize them so a dead signal never reads as a valid value.
Why the HMI Shows the New Recipe While the Machine Still Runs the Old One
Split selected, downloaded and active recipe state into separate tags, compare what the PLC echoes against what you sent, and give rejections a reason.
Your SCADA Backup Isn't a Backup Until It Restores on a Clean Machine
Running a restore drill: what falls out of the backup set, the OPC UA certificate traps, RPO and retention per artefact, and a measured RTO against the target.
Why Your OPC UA Client Drops Fast Tag Changes — and Which Queue Settings Fix It
How monitored item queues, discard policy and the Overflow status bit decide whether your client sees every fast tag change or only the latest one.
Why Alarm Acknowledge, Latch, and Reset Must Stay Separate Signals
One shared bit for acknowledge and reset is how alarms vanish while the fault is live. Separating active, latch, ack, return-to-normal and reset.
Why Your HMI Screen Is Slow: Measure Tag Load Before You Redraw Graphics
Split a five-second faceplate into first-load and update delay, then work down through tag counts, scan classes, trend queries and PLC load.
Why a Successful Modbus Write Doesn't Mean the Motor Started
A Modbus TCP write response says the transaction was accepted, not that the motor moved. Command discipline: permissives, readback, and the retry trap.
OPC UA Method Calls From the HMI: Why 'Good' Doesn't Mean the Command Ran
An OPC UA method call can return Good while the machine never moves. Wiring HMI calls so operators see acceptance, execution and a real failure reason.
The Banner Was Empty and the Plant Was Not Quiet
Filtering an alarm banner is not suppressing an alarm, and ISA-18.2 draws that line for a reason. What the default view owes the operator during a flood.
If the Vendor VPN Lands on the PLC Subnet, You Don't Have a DMZ
Designing SCADA remote access against IEC 62443-3-3 SR 5.2 and SR 1.13, testing the denied paths at commissioning, and the port and timeout numbers that break it.
Why Two SCADA Screens Disagree About the Same Pump
One screen says the pump is stopped, the report says faulted. The fix is a derived status tag with a written priority order that every client shares.
How Long Should an Alarm Delay Be? Set It From Process Time, Not a Default
Setting on-delays, off-delays, debounce and deadband from process behaviour and ISA-18.2 — filtering nuisance alarms without hiding the first warning.
Finding the First-Out Alarm When Your SCADA Floods
Alarm floods bury the initiating cause. Preserving first-out, trusting sequence-of-events timestamps, and stopping comms failures becoming floods.
Make HMI Commands Prove They Worked, Not Just That You Clicked
How to drive HMI state from feedback instead of command bits, set timeouts from real actuator travel, and show operators why a command was rejected.
How to Commission Analog Scaling Without Trusting the HMI Number
A field walkthrough for analog scaling: ranges, engineering units, Modbus word order, NAMUR thresholds — so PLC, SCADA, HMI and historian agree.
HMI Permissive and Interlock Display Checklist
How to show permissives, interlocks, inhibits, bypasses, command readiness, and first-out causes on practical HMI screens.
Alarm Rationalization Workshop Checklist
Running alarm rationalization sessions that produce usable priorities, causes and operator response guidance instead of another unread spreadsheet.
Why Operators Code Everything as "Other" — Fixing an MES Downtime List
Designing downtime reason codes operators pick correctly under pressure: prompt timing, auto-coding from PackML state, and the fields reports need.
Why Your HMI Should Never Merge Mode and State Into One Field
Mode is who may command the equipment; state is what it is doing. SEMI E30's control state model splits them — here is how to split the HMI to match.
Things I Learned from Real HMI/SCADA Projects
Project notes about naming, alarms, screenshots, networking, commissioning, backups, and documentation habits that matter later.
Designing SCADA Trend Displays Operators Can Troubleshoot From
Trend screens that answer the operator's real question during an upset: grouping by loop, choosing scales, and drawing a comms gap as a gap.
From SCADA Signals to Operational State
How raw SCADA, HMI and protocol values become useful machine state, process state, alarm state and control state, and where each one is decided.
HMI Faceplate Design Checklist
A practical checklist for designing HMI faceplates that operators can use quickly, consistently, and safely during normal operation and troubleshooting.
Shelving vs. Suppression: Quieting SCADA Alarms Without Hiding Real Risk
How ISA-18.2 splits shelving, designed suppression, out-of-service and interlock bypass — and configuring them so every hidden alarm keeps an owner.
SCADA Commissioning Checklist
A commissioning checklist for validating HMI and SCADA screens, tags, alarms, trends, historians, users, backups and comms paths before handover.
Try a Live Operational State Tutorial
A short hands-on walkthrough that turns one temperature signal into alarm state, switch action, HMI feedback, and an event log using the StateX tutorial.
Common SCADA Alarm Design Mistakes
Practical alarm design mistakes that create nuisance alarms, floods, operator confusion, and poor incident response.
What is a SCADA Tag?
A practical definition of SCADA tags and how they connect PLC addresses, alarms, trends, screens, and reports.
HMI vs SCADA vs MES vs Historian
A field-oriented comparison of common industrial software layers and where their responsibilities overlap.
What is SCADA?
A practical explanation of SCADA systems: what they do, where they fit, and what to watch for on real projects.