Consigne

Analyse a SCADA alarm log online, without uploading it

Drop your alarm log export (CSV or text) and pick the timestamp, alarm and state columns. The tool computes the indicators commonly used with ISA-18.2 and EEMUA 191: alarms per hour per operator position, 10-minute peak, time in flood, share of the 10 most frequent alarms, chattering and stale alarms, and priority distribution. Your browser reads the file; it is never sent anywhere.

Published 27 October 2026 · 3 min · by Antoine Despres, Consigne

Preparing the file

The tool accepts most text exports: semicolon, comma, tab or pipe separators, with a header row. At minimum it needs:

ColumnExampleRequired
Timestamp10/12/2026 2:03:27 PM or 2026-10-12T14:03:27yes
AlarmTT-104 or "Furnace temperature high"yes
StateON / OFF, 1 / 0, Came In / Went Outno, but recommended
PriorityHigh, 1, Criticalno

Columns are guessed from the headers; check them in the lists that appear after loading. For the state column, pick the value that means "alarm comes in": an activation is only counted if the alarm was not already active.

The Try with sample data button loads a fictitious 24-hour log with a chattering alarm and a flood, so you can see what the results look like.

What the tool computes

IndicatorMethod used here
Alarms per hour per positionactivations ÷ log duration ÷ number of operator positions
10-minute peakhighest number of activations in a fixed 10-minute slot, per position
Time in floodshare of 10-minute slots with more than 10 activations per position
Share of the 10 most frequentactivations of the 10 most active alarms ÷ all activations
Chattering alarmsalarms activated 3 or more times within one minute, at least once
Stale alarmsalarms that stayed active for more than 24 hours, or are still active after more than 24 hours at the end of the log
Priority distributionshare of each value of the priority column among activations

Fixed 10-minute slots slightly underestimate peaks compared with a sliding window. For a first diagnosis the difference does not matter.

How to read the results

A good average can hide floods. A site averaging 4 alarms per hour can still spend several percent of its time in flood after every trip. Those are the moments when operators make mistakes: always look at the peak and time in flood, not only the average.

The top 10 tells you where to work. On most sites a handful of alarms makes up a large part of the volume. Fixing the ten most frequent ones (deadband, on-delay, misplaced limit, alarms that are not really alarms) often cuts the overall rate dramatically.

Chattering alarms are fixed in the controller, not the HMI. An alarm that comes and goes several times a minute oscillates around its limit; the cure is a deadband or an on-delay.

Stale alarms erode trust. An alarm active for three weeks is an alarm nobody reads anymore: either it flags a real problem left unresolved, or it calls for no action and should not be an alarm.

Limits of this tool

  • It does not handle daylight saving changes or time zones: times are read as written.
  • It does not rebuild acknowledgements or shelving.
  • It handles one date format at a time; for ambiguous dates (03/04), choose day/month/year or month/day/year.
  • Very large files (hundreds of thousands of rows) work but slow the browser down.

Going further

Displaying alarms well matters as much as rationalising them. The High-Performance HMI guide covers priorities, the alarm list and alarm floods, and the hmi-kit components provide an alarm banner and an alarm list sorted by priority. The 8 high-performance HMI rules put alarms back into the overall approach.

Sources

  • ANSI/ISA-18.2, Management of Alarm Systems for the Process Industries (not reproduced)
  • IEC 62682, Management of alarm systems for the process industries (not reproduced)
  • EEMUA Publication 191, Alarm systems, a guide to design, management and procurement (not reproduced)

More guides