historian & aveva insight - california.wonderware.com€¦ · model-based navigation...
TRANSCRIPT
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Historian & AVEVA Insight
Mike Brost
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Over 100,000
Licensed Systems
Only 2%
Storage Space vs.
Relational Databases
12 Petabytes
New Data Added
Each Year
Historian Scale
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
How Customers Use Historian
Multiple responses allowedSource: Tech Validate
19%
27%
29%
43%
46%
71%
0% 25% 50% 75%
Energy consumption
Production/cost accounting
Downtime tracking
Identifying improvement opportunities
Regulatory reporting
Diagnostics/troubleshooting
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
What Makes A Historian?
Presentation
Transformation
Preservation
Collection
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Volume Challenge
1 tag5-second samples1-day
~17,000 samples
Storage can always scale
(at a cost)
How do you make use of it?
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Periodic Statistics
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Change-based Statistics
U3
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Insight: On Premise & Cloud
Web Based Historian Dashboards
Additional charts available in online AVEVA Insight
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
PlantCorporateCustomers/
Suppliers
InTouchClear
SCADAInduSoft
(InTouch ME)Vijeo
Citect*Historian
SDKHistorian
(tier 1)OPC/OI Server
MQTT HTTP(CSV/JSON)
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Historize Downtime ReasonString or integer tag
Accurately records micro-stops
State summary calculates
statistics
View As A ParetoIn Insight
Custom charts
Simple Utilization Charts
|
Backed Up
Electrical
Equipment Jam
Material Jam
Starved
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Dashboard Comparison
All data is time-series
Super-simple, self service
Independent charts
Basic layout
Virtually any data
Leverages time-slicing engine
Expert user enables self-service
Enables chart interaction
Insight Intelligence
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Excel 2016/365 Add-in
Both 32-bit & 64-bit
U3
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Insight & Historian Data
Discrete(Boolean)
Analog(floating point,
integer)
String(512 characters)
Alarms(structured time series)
AaSummary
(Analog & State)
∑μ
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Alarm History Options
WWALMDB
InTouch
Alarm DB Logger
7.11 - 2000
A2ALMDB
Application Server
HCAL
2014
WWALMDB
Application Server
1.0 - 2002
Application Server
Historian
2014 R2
Routine purge required
(SQL Server limitation)
Reliability could be better
Reliable forwarding
(HCAL)
Manageability
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Block-Based Alarm History
Application Server
Historian
2014 R2
Performance
Significantly higher storage rates
Capacity limited by disk space, not
insertion rate
Easier To Manage
Archive/purge/restore using Windows
Explorer
No need to purge to sustain storage
HCAL
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Alarms In Context
2017 U1
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Alarms In Context
Only for block-based alarm history
Historian 2017 Update 1 Historian Client 2017 Update 2
U2U1
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Which Alarms?
WWALMDB
InTouch
Historian
Application Server
Control System
U1
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Which Alarms?
Historian
Application Server
Control System
Historian 2017 Update 3
InTouchWill require Remote IDAS here
Detected Here
Detected Here
U3
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Which Alarms?
Historian 2017 Update 3
Application Server 2017 Update 3
Control System
Historian 2017 Update 3
InTouchWill require Remote IDAS here
Detected Here
Detected HereU3
Model-based navigation (“breadcrumbs”)
Grouped by Attribute, Tag, Object, Area
Q4online
?on-premises
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Tiered Historians
9.0 - 2005
10.0 - 2010
Make it easy to manage
Make efficient use of
network
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Scalability
2012 R2500K
20142 million
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Cybersecurity Imperatives
▲ Only outbound ports
▲ No inbound connection
▲ Hardened operating system, SQL Server
▲ Least privilege
▲ No default passwords
▲ Encrypted communications
Control
Business
Firewall
Firewall
DMZ
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
▲ Do you use encryption?
▲ Can we use Windows Authentication?
▲ Do we have to open firewall ports?
Approach to Security
People Training Policies SOP’s and
Tools Technology
A Holistic Approach Is Much More Than Technology
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Approach To Security
Certified 1 October 2016
First in industrial software
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Windows SecurityOngoing Hardening
Release OS Admin Identity A2 UserRemote
SMCR-IDAS Comms
8.0 Admins System Admin DCOM DCOM/Admin Binary9.0 Admins System Admin DCOM Common Admin Binary
2014 R2 Admins System Admin DCOM Common Admin Binary2014 R2 SP1 Admins* System Admin DCOM Common Admin Binary
2017 InstallService Account
Admin* Disabled* TCP Binary
2017 U3 InstallService Account
Standard TLS/TCP TLS
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
SQL Server SecurityOngoing Hardening
Release Sysadmin Identity System Users Instance Ports Connections
8.0 Admins System SQL LoginSQL,Windows
Default Default TCP
9.0 Install SystemWindows Integrated
SQL,Windows
Default Default TCP
2014 R2 InstallNetwork Service
Windows Integrated
SQL,Windows
Default Default TCP
2014 R2 SP1 InstallNetwork Service
Windows Integrated
SQL,Windows
Default Default TCP
2017 InstallNetwork Service
Windows Integrated
SQL,Windows
Any Any TCP
2017 U3 InstallNetwork Service
Windows Integrated
SQL,Windows
Any Any TLS/TCP
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Communications Security
SQL Server
HistorianClient
Insight Browser
HTTP*
Replication (HCAL)*
Historian(“tier 2”)
HCAL* SuiteLink
* advanced configuration required before 2017 U3
InTouchApplication Server
AVEVA Insight
HTTPS/TLS
HTTPS/TLS
Secure by default inWSP 2017 Update 3
Always secure by default
Historian (“tier 1”)
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
2010 20172011 2012 2013 2014 2015 2016 2018
SmartGlance HistorianOnline
(VM)
WonderwareOnline
Newsfeed UtilizationHybrid
First managed solution First managed HistorianFirst native cloud HistorianSearch-based selectionUnsupervised machine learning Integrated utilizationHybrid on-premise/online Historian
Online Maturity
Maps, Graphics
Visualization
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Geolocation
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
SupervisedA human expert
guides/configures
Higher-value results
Example: PRiSMEngineer identifies evaporator as
high-value equipment
Finds related instruments
PRiSM reports anomalies
UnsupervisedAutomatically configured
May report insignificant
discoveries
Example: NewsfeedNo configuration required
Reports anomalies
Feedback part of training
Machine Learning
+
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Anomaly Detection
Flatlined data
Change in value range
Change in cycle times
Change in distribution
Curator
Assigns significance “score” to each report
Filters reports based on user interests
Newsfeed Updates
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Anomaly Detection ✔
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Detect “Systems”
Interrelated tags
e.g. loops, boiler temp/pressure
Detect System Changes
Boiler leak
Clogged fuel
Broken impeller
Multiple Tag Anomalies
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Paired Data Centers In North America, Europe & Australia
https://connect.aveva.com/insight
https://online.wonderware.eu
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Search Changes
Q4
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
New Asset Page
Q4
Auto-generatedCustom Graphic
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Insight Publishing
Control
Firewall
▲ Single outbound-only port (443)
▲ No inbound connection
▲ All traffic encrypted (TLS)
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Insight Publishing
Control
Business
Proxy
Firewall
Firewall
▲ Single outbound-only port (443)
▲ No inbound connection
▲ All traffic encrypted (TLS)
▲ Anonymous HTTP proxy
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Insight Publishing
Control
Business
Firewall
Proxy
Firewall
Firewall
DMZ
▲ Single outbound-only port (443)
▲ No inbound connection
▲ All traffic encrypted (TLS)
▲ Anonymous HTTP proxy
▲ DMZ
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Insight Publishing
Control
Business
Firewall
Proxy
Firewall
Firewall
DMZ
▲ Single outbound-only port (443)
▲ No inbound connection
▲ All traffic encrypted (TLS)
▲ Anonymous HTTP proxy
▲ DMZ
▲ Can be chained together
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Crossing The DMZ
Technical Details▲ Captive, Application-specific Web Proxy
▲ Can’t be used to access other sites
▲ Whitelist▲ Managed (managed by Insight)
▲ Signed (can’t be user-edited)
▲ Can be chained together
▲ Deployment▲ Downloaded from Insight
▲ When connections fail, Publisher recommends it
Q4
Copyright © 2018 AVEVA Group plc and its subsidiaries. All rights reserved.
Limited Internet Access