Alarm management apparatus, alarm management system, and alarm management method

CROSS-REFERENCE TO RELATED APPLICATION

0001The present application claims priority to and the benefit of Japanese Patent Application No. <patcit id="pcit0001" dnum="JP2019146753A"><text>2019-146753 filed August 8, 2019</text></patcit>, the entire contents of which are incorporated herein by reference.

TECHNICAL FIELD

0002The present disclosure relates to an alarm management apparatus, an alarm management system, and an alarm management method.

BACKGROUND

0003When a piece of equipment is in an abnormal state due to process modulation or device failure in a plant or the like where a distributed control system (DCS) is used, this abnormality may trigger a secondary process abnormality in another piece of equipment. The occurrence of a process abnormality upstream, for example, may cause a process abnormality to occur downstream as well. If all of the alarms indicating abnormalities are displayed on the monitoring screen of an operator in this case, the monitoring screen becomes covered in alarms (alarm flood), confusing the operator. One approach to address this issue could be to present the operator with only the alarm indicating the original cause of the abnormality (trigger alarm), without presenting the alarms indicating secondary process abnormalities.

0004Patent literature (PTL) 1 proposes designating only the trigger alarm that indicates the original cause of the abnormality as the monitoring target of the operator and removing other alarms from the monitoring target of the operator. This prevents the operator from overlooking important alarms.

CITATION LIST

Patent Literature

0005PTL 1: <patcit id="pcit0002" dnum="JP2010033118A"><text>JP2010-33118A</text></patcit>

SUMMARY

0006When the monitoring target of the operator is only the trigger alarm as in PTL 1, the operator performs an operation to recover from the abnormality based only on the trigger alarm. A recovery operation based only on the trigger alarm, however, might not resolve the abnormality. In other words, the information presented to the operator has room for improvement to increase the efficiency of operations by the operator to recover from an abnormality.

0007The present disclosure therefore aims to provide an alarm management apparatus, an alarm management system, and an alarm management method that can increase the efficiency of operations by the operator to recover from an abnormality.

0008An alarm management apparatus according to an embodiment presents a trigger alarm, which should be presented to an operator, to the operator when the trigger alarm is included in an alarm that is received or generated, stores a suppressed alarm related to the trigger alarm, without presenting the suppressed alarm to the operator, when the suppressed alarm is included in the alarm, and presents the stored suppressed alarm to the operator based on an operation by the operator.

0009In this way, the suppressed alarm is presented to the operator based on an operation by the operator, thereby increasing the efficiency of operations by the operator to recover from an abnormality.

0010In an embodiment, when the suppressed alarm is effective for resolving the trigger alarm, the suppressed alarm may be presented to the operator together with the trigger alarm without the operator performing an operation.

0011In this way, a suppressed alarm useful for resolving the trigger alarm is presented to the operator together with the trigger alarm without the need for a call operation by the operator, thereby further increasing the efficiency of operations by the operator to recover from an abnormality.

0012In an embodiment, when the suppressed alarm is effective for resolving the trigger alarm, the suppressed alarm may be presented to the operator with greater emphasis than other suppressed alarms.

0013In this way, a suppressed alarm useful for resolving the trigger alarm is displayed with greater emphasis than other suppressed alarms, thereby further increasing the efficiency of operations by the operator to recover from an abnormality.

0014In an embodiment, the suppressed alarm effective for resolving the trigger alarm may be determined based on an operation history of the operator or a response from the operator.

0015In an embodiment, a learning unit configured to optimize a classification condition for classifying the alarm as the trigger alarm or the suppressed alarm based on an operation history of the operator may be further included.

0016Inclusion of the learning unit can further increase the efficiency of operations by the operator to recover from an abnormality.

0017An alarm management system according to an embodiment includes the alarm management apparatus, an operation monitoring terminal, and an engineering terminal.

0018In this way, the suppressed alarm is presented to the operator based on an operation by the operator, thereby increasing the efficiency of operations by the operator to recover from an abnormality.

0019An alarm management method according to an embodiment includes presenting a trigger alarm to an operator when the trigger alarm is included in an alarm that is received or generated, storing a suppressed alarm related to the trigger alarm, without presenting the suppressed alarm to the operator, when the suppressed alarm is included in the alarm, and presenting the stored suppressed alarm to the operator based on an operation by the operator.

0020In this way, the suppressed alarm is presented to the operator based on an operation by the operator, thereby increasing the efficiency of operations by the operator to recover from an abnormality.

0021The present disclosure can provide an alarm management apparatus, an alarm management system, and an alarm management method that can increase the efficiency of operations by the operator to recover from an abnormality.

BRIEF DESCRIPTION OF THE DRAWINGS

0022In the accompanying drawings: <ul id="ul0001" list-style="none" compact="compact"><li><figref idref="f0001">FIG. 1</figref> illustrates the configuration of an alarm management apparatus according to an embodiment of the present disclosure;</li><li><figref idref="f0002">FIG. 2</figref> is a flowchart illustrating a first processing example in the alarm management apparatus of <figref idref="f0001">FIG. 1</figref>;</li><li><figref idref="f0003">FIG. 3</figref> illustrates a presentation example before step S100 of <figref idref="f0002">FIG. 2</figref>;</li><li><figref idref="f0004">FIG. 4</figref> illustrates a presentation example of step S101 of <figref idref="f0002">FIG. 2</figref>;</li><li><figref idref="f0005">FIG. 5</figref> illustrates a presentation example of step S101 of <figref idref="f0002">FIG. 2</figref>;</li><li><figref idref="f0006">FIG. 6</figref> illustrates a presentation example of step S104 of <figref idref="f0002">FIG. 2</figref>;</li><li><figref idref="f0007">FIG. 7</figref> illustrates a presentation example of step S106 of <figref idref="f0002">FIG. 2</figref>;</li><li><figref idref="f0008">FIG. 8</figref> is a flowchart illustrating a second processing example in the alarm management apparatus of <figref idref="f0001">FIG. 1</figref>;</li><li><figref idref="f0009">FIG. 9</figref> illustrates an example of a definition file before the processing of step S204 of <figref idref="f0008">FIG. 8</figref>; and</li><li><figref idref="f0010">FIG. 10</figref> illustrates an example of the definition file after the processing of step S204 of <figref idref="f0008">FIG. 8</figref>.</li></ul>

DETAILED DESCRIPTION

0023Embodiments of the present disclosure are described below with reference to the drawings. Identical reference signs in the drawings indicate identical or equivalent constituent elements.

0024As illustrated in <figref idref="f0001">FIG. 1</figref>, an alarm management apparatus 1 according to an embodiment of the present disclosure can perform data communication with an operation monitoring terminal 2, a controller 3, and an engineering terminal 5.

0025The operation monitoring terminal 2 may be any terminal capable of including a display 21 that displays the result of processing by the alarm management apparatus 1 and an input interface 22 capable of receiving operations by the operator. Examples of the operation monitoring terminal 2 include a desktop PC, a smartphone, and a tablet terminal.

0026The controller 3 is connected to field devices and the like and controls these devices. The controller 3 detects an abnormality from process modulation or a field device and transmits information based on the abnormality to the alarm management apparatus 1 via a control network 4. When the controller 3 has a function to generate an alarm based on the above-described abnormality, the controller 3 may transmit the alarm generated by the controller 3 to the alarm management apparatus 1 via the control network 4. Only one controller 3 is illustrated in <figref idref="f0001">FIG. 1</figref>, but more than one controller may be provided.

0027The engineering terminal 5 can include an input interface 51 capable of receiving an operation by an engineer. The engineer can use the input interface 51 to create a definition file, described below. The definition file created by the engineer is downloaded onto the alarm management apparatus 1 via the control network 4 and is used in the processing executed by the alarm management apparatus 1. Examples of the engineering terminal 5 include a desktop PC, a smartphone, and a tablet. The "definition file" is described below.

0028When a piece of equipment is in an abnormal state in a plant or the like due to process modulation or device failure, this abnormality may trigger a secondary process abnormality in another piece of equipment. The occurrence of a process abnormality upstream, for example, may cause a process abnormality to occur downstream as well. If all of the alarms indicating abnormalities are displayed on the monitoring screen of an operator in this case, the monitoring screen becomes covered in alarms (alarm flood), confusing the operator. One approach to address this issue has been to present the operator with only the alarm indicating the original cause of the abnormality (trigger alarm), without presenting the alarms indicating secondary process abnormalities. The operator can efficiently perform operations to recover from the process abnormality that caused the trigger alarm, however, when an alarm indicating a secondary process abnormality due to the process abnormality that caused the trigger alarm (i.e. a suppressed alarm not presented to the operator with a known technique) is also presented to the operator as necessary. In other words, associating the trigger alarm with a suppressed alarm enables the operator to perform operations efficiently to recover from the process abnormality that caused the trigger alarm. As an example of this association between then trigger alarm and the suppressed alarm, an engineer can use the engineering terminal 5 to create a definition file for associating the trigger alarm and the suppressed alarm. The definition file contains a description of a trigger alarm, a suppressed alarm that occurs consequently with the process abnormality that caused the trigger alarm, and an alarm group to which the trigger alarm and the suppressed alarm belong.

0029The alarm management apparatus 1 may include a processor 11, a storage 12, and a communication interface 15. The components of the alarm management apparatus 1 are described below in detail.

0030The storage 12 may include a first storage area 13 and a second storage area 14. The storage 12 can be implemented using a semiconductor memory, a magnetic memory, or an optical memory, for example. Examples of the storage 12 include read only memory (ROM), flash memory, and dynamic random access memory (DRAM), which is capable of temporarily storing data. The number of storages 12 is not limited to one, and the first storage area 13 and the second storage area 14 may be located in different storages. The storage 12 may be an external storage apparatus that is attached to the alarm management apparatus 1.

0031When an abnormality occurs in a plant or the like, the processor 11 receives information based on the abnormality and generates an alarm. For example, the processor 11 can receive the information from the controller 3 via the control network 4 and the communication interface 15. The processor 11 can be implemented using one or a plurality of processors.

0032The processor 11 judges whether a trigger alarm is included in the generated alarm. To make this judgment, the processor 11 can refer to the above-described definition file.

0033When a trigger alarm is included, the processor 11 presents the trigger alarm to the operator. For example, the processor 11 can display the trigger alarm on the display 21 of the operation monitoring terminal 2. <figref idref="f0004">FIG. 4</figref> illustrates a window displayed on the display 21 of the operation monitoring terminal 2 when the trigger alarm is "PPX001.LL". The label "PPX001.LL" indicates that the state of an alarm occurring on the device with the tag name "PPX001" is LL (lower lower limit alarm). The processor 11 also presents the alarm group to which the trigger alarm belongs in a manner selectable by the operator. For example, the processor 11 can display the alarm group to which the trigger alarm belongs on the display 21 of the operation monitoring terminal 2 in a selectable manner. <figref idref="f0005">FIG. 5</figref> illustrates a list of alarm groups in a window displayed on the display 21 of the operation monitoring terminal 2. While details are provided below, the operator can refer to the "Suppression Group" column displayed in the window of <figref idref="f0004">FIG. 4</figref> to confirm the trigger alarm and the alarm group to which the trigger alarm belongs. The window of <figref idref="f0006">FIG. 6</figref> is displayed when the operator clicks or the like to select the icon 21a displayed in the window of <figref idref="f0005">FIG. 5</figref>. Examples of the icon 21a include symbols, characters, numbers, graphics, or a combination thereof. The operator may, however, select the alarm group described above in the window of <figref idref="f0004">FIG. 4</figref> without going through the window of <figref idref="f0005">FIG. 5</figref>.

0034The processor 11 can enter a standby state when a trigger alarm is not included in the generated alarm.

0035Furthermore, the processor 11 judges whether a suppressed alarm related to the above-described trigger alarm is included in the generated alarm. To make this judgment, the processor 11 can refer to the above-described definition file.

0036When a suppressed alarm related to the trigger alarm is included, the processor 11 stores the suppressed alarm in the storage 12, for example, without presenting the suppressed alarm to the operator. Based on an operation by the operator, the processor 11 presents the suppressed alarms stored in the storage 12, for example, to the operator. In greater detail, the processor 11 associates the suppressed alarm with a predetermined alarm group based on the above-described definition file and stores the result in the second storage area 14, for example. The operator then refers to the window of <figref idref="f0004">FIG. 4</figref> and the window of <figref idref="f0005">FIG. 5</figref> to confirm a predetermined alarm group to which the trigger alarm belongs and selects the icon 21a displayed in the window of <figref idref="f0005">FIG. 5</figref> by clicking or the like. Consequently, the processor 11 receives notification, via the communication interface 15, that the predetermined alarm group has been selected by the operator. The processor 11 then refers to the second storage area 14, for example, and presents the operator with the suppressed alarms belonging to the predetermined alarm group selected by the operator. Consequently, the window of <figref idref="f0006">FIG. 6</figref>, for example, is displayed on the display 21 of the operation monitoring terminal 2. <figref idref="f0006">FIG. 6</figref> is a window indicating that the suppressed alarms belonging to the same alarm group (group name "feedwpump_repl_Sup") as the trigger alarm "PPX001.LL" are "TIC001.LL", "TIC001.LO", "PIC002.LL", "PIC002.LO", "PIC001.LL", "PIC001.LO", "TIC006.LL", "TIC006.LO", "CPX002.LL", "CPX002.LO", "CPX001.LL", "CPX001.L0", and "PPX001.LO". Here, LO represents the state in which a lower limit alarm has occurred.

0037The processor 11 can enter the standby state when a suppressed alarm related to the trigger alarm is not included.

0038When the process value of a device exceeds a predetermined threshold, the processor 11 may judge that an alarm is to be presented to the operator. The operator can use the definition file to freely set the "predetermined threshold" for each trigger alarm and suppressed alarm.

0039The communication interface 15 may include one or a plurality of communication interfaces capable of communicating with each of the operation monitoring terminal 2, the controller 3, and the engineering terminal 5. The communication interface may be any communication interface capable of data communication in a wired or wireless manner.

(First Processing Example)

0040Next, a first processing example that can be executed by the alarm management apparatus 1 according to the present embodiment is described with reference to <figref idref="f0002">FIG. 2</figref>.

0041Normally, the logic of the processor 11 is set so that operator is notified only of trigger alarms, whereas notification of suppressed alarms is suppressed automatically. This state is referred to below as the "alarm suppressed state". The alarm suppressed state is, for example, set as necessary by the operator operating a selection screen on the display 21 via the input interface 22 of the operation monitoring terminal 2. For example, via the window of <figref idref="f0003">FIG. 3</figref> displayed on the display 21 of the operation monitoring terminal 2, the operator can set the suppressed alarms belonging to an alarm group (group name "feedwpump_repl_Sup") to the alarm suppressed state and can set the suppressed alarms belonging to other alarm groups (group names "ASup01", "ASup02", and "Turbinne-start-up") to an alarm non-suppressed state. The first processing example begins in <figref idref="f0002">FIG. 2</figref> in this state.

0042In step S100, the processor 11 stores suppressed alarms belonging to alarm groups in the alarm suppressed state in the storage, without presenting these suppressed alarms to the operator.

0043Subsequently, in step S101, the processor 11 presents the trigger alarm to the operator. Here, the window of <figref idref="f0005">FIG. 5</figref> was already being displayed on the display 21 of the operation monitoring terminal 2, and the window of <figref idref="f0004">FIG. 4</figref> is additionally displayed separately from the window of <figref idref="f0005">FIG. 5</figref> in step S101.

0044Subsequently, in step S102, the processor 11 presents the operator with the alarm group to which the trigger alarm presented to the operator in step S101 belongs. The alarm group is presented in a selectable manner.

0045Subsequently, in step S103, the operator selects the alarm group presented in a selectable manner in step S102. The operator can refer to the "Suppression Group" column displayed in the window of <figref idref="f0004">FIG. 4</figref>, confirm the predetermined alarm group to which the trigger alarm in step S101 belongs (here, the group name "feedwpump_repl_Sup"), and select the icon 21a in the window of <figref idref="f0005">FIG. 5</figref> by clicking or the like to select the predetermined alarm group (here, the group name "feedwpump_repl_Sup"). When the alarm group is also displayed in the window of <figref idref="f0004">FIG. 4</figref>, the operator may select the alarm group (group name "feedwpump_repl_Sup") without passing through the window of <figref idref="f0005">FIG. 5</figref>.

0046Subsequently, in step S104, the processor 11 refers to the storage 12 and presents the suppressed alarms belonging to the alarm group selected in step S103 to the operator. In step S104, the window of <figref idref="f0006">FIG. 6</figref> is additionally displayed on the display 21 of the operation monitoring terminal 2 separately from the window of <figref idref="f0004">FIG. 4</figref> and the window of <figref idref="f0005">FIG. 5</figref>. In the window of <figref idref="f0006">FIG. 6</figref>, an icon 21b indicating an abnormality is displayed for each suppressed alarm. Examples of the icon 21b include symbols, characters, numbers, graphics, or a combination thereof.

0047Subsequently, in step S105, the operator performs an operation to recover from the abnormality based on the trigger alarm presented in step S101 and the suppressed alarms presented in step S104.

0048Here, when the abnormality is resolved by the recovery operation by the operator, the processor 11 can present a corresponding notification to the operator. For example, when the abnormality of the suppressed alarm "CPX002.LO" is resolved, the icon 21b displayed in the window of <figref idref="f0006">FIG. 6</figref> to indicate the abnormality changes to an icon indicating a normal state. The icon 21c displayed in the window of <figref idref="f0004">FIG. 4</figref> to indicate the abnormality changes to the icon 21d displayed in the window of <figref idref="f0007">FIG. 7</figref> to indicate a normal state when the trigger alarm "PPX001.LL" related to the suppressed alarm "CPX002.LO" is also resolved. In other words, the window displayed on the display 21 of the operation monitoring terminal 2 changes from the "window of <figref idref="f0004">FIG. 4</figref>, window of <figref idref="f0005">FIG. 5</figref>, window of <figref idref="f0006">FIG. 6</figref>" to the "window of <figref idref="f0007">FIG. 7</figref>, window of <figref idref="f0005">FIG. 5</figref>, window of <figref idref="f0006">FIG. 6</figref> (in which the icon 21b indicating an abnormality has changed to an icon indicating a normal state). The windows of <figref idref="f0006">FIGS. 6</figref>, <figref idref="f0007">7</figref> disappear from the display 21 of the operation monitoring terminal 2 in response to the operator performing an operation via the input interface 22 of the operation monitoring terminal 2. When a plurality of trigger alarms occur, however, the resolution of one trigger alarm does not necessarily resolve the other trigger alarms. The operator may therefore not always close the window of <figref idref="f0007">FIG. 7</figref>. Examples of the icons 21c, 21d include symbols, characters, numbers, graphics, or a combination thereof.

0049Subsequently, in step S106, the processor 11 judges whether the trigger alarm has been resolved by the recovery operation in step S105. When the trigger alarm has been resolved (step S106: YES), the present processing ends. When the trigger alarm has not been resolved (step S106: NO), the processing returns to step S104.

0050In the first processing example, the consequent suppressed alarms that are normally not presented to the operator to avoid an alarm flood are presented intentionally based on an operation by the operator. The number of alarms can therefore be reduced to prevent an important alarm from being overlooked while also enabling suppressed alarms, which are normally not presented, to be used effectively as auxiliary information for an operation to recover from an abnormality. Furthermore, the operator can confirm that recovery from the trigger alarm has also resolved all of the secondary process abnormalities that occurred. This can increase the efficiency of operations by the operator to recover from an abnormality.

(Second Processing Example)

0051Next, a second processing example that can be executed by the alarm management apparatus 1 according to the present embodiment is described with reference to <figref idref="f0008">FIG. 8</figref>.

0052The second processing example differs from the first processing example in that suppressed alarms effective for resolving the trigger alarm are presented to the operator along with the trigger alarm, without the operator performing an operation. The processor 11 performs similar processing to steps S100 to S103 of <figref idref="f0002">FIG. 2</figref> in the second processing example as well. Among the processing included in the second processing example, <figref idref="f0008">FIG. 8</figref> illustrates the processing from step S103 of <figref idref="f0002">FIG. 2</figref> onwards.

0053In step S200, the processor 11 presents the consequent suppressed alarms to the operator, as in the first processing example.

0054Subsequently, in step S201, the operator performs an operation to recover from an abnormality based on the trigger alarm and the suppressed alarms, as in the first processing example.

0055In step S202, the processor 11 then judges whether the trigger alarm has been resolved by the recovery operation by the operator, as in the first processing example. When the trigger alarm has been resolved (step S202: YES), the processing proceeds to step S203. When the trigger alarm has not been resolved (step S202: NO), the processing returns to step S200.

0056In the case of proceeding to step S203, the processor 11 judges in this step whether to present suppressed alarms effective for resolving the trigger alarm subsequently to the operator. When the suppressed alarms are to be presented to the operator with the trigger alarm (step S203: YES), the processing proceeds to step S204. When the suppressed alarms are not to be presented to the operator with the trigger alarm (step S203: NO), the present processing ends.

0057For example, the processor 11 may judge in step S203 that the suppressed alarms are useful for resolving the trigger alarm when the number of times the trigger alarm is resolved as a result of the operator performing an operation to recover from the anomaly based on a particular suppressed alarm (i.e. the same suppressed alarm each time) exceeds a predetermined value. The operator can appropriately set the "predetermined value" using the input interface 51 of the engineering terminal 5. In other words, the suppressed alarm useful for resolving the trigger alarm can be determined based on the operation history of the operator. Alternatively, the processor 11 may present the operator with a dialog box or the like to ask whether a particular suppressed alarm is effective for resolving the trigger alarm. Based on the response inputted by the operator in the dialog box, the processor 11 may judge whether to present the suppressed alarm effective for resolving the trigger alarm to the operator. In other words, the suppressed alarm useful for resolving the trigger alarm can be determined based on a response from the operator.

0058In the case of proceeding to step S204, the processor 11 changes the control logic in this step so that the suppressed alarm that was effective for resolving the trigger alarm is subsequently presented to the operator together with the trigger alarm. The processor 11 then ends the present processing.

0059For example, the control logic may be changed in step S204 by updating the definition file as described below. <figref idref="f0009">FIG. 9</figref> illustrates the content of the definition file before updating, whereas <figref idref="f0010">FIG. 10</figref> illustrates the content of the definition file after updating. A comparison of <figref idref="f0009">FIG. 9</figref> and <figref idref="f0010">FIG. 10</figref> reveals that since the suppressed alarm "CPX002.LO" is effective for resolving the trigger alarm "PPX001.LL", the column "Excluded from suppression" is checked for the suppressed alarm "CPX002.LO" in <figref idref="f0010">FIG. 10</figref>. Consequently, the suppressed alarm "CPX002.LO" is subsequently displayed on the display 21 along with the trigger alarm. The consequent alarm "PPX001.LO" for which the column "Alarm On Check" is checked refers to how alarm suppression processing is continued if this alarm occurs within a predetermined time (such as within one minute) from the occurrence of the trigger alarm "PPX001.LL".

0060In this way, the suppression of a suppressed alarm useful for resolving the trigger alarm is suspended in the second processing example and is presented to the operator without the need for a call operation. In the first processing example, a suppressed alarm is presented to the operator as necessary based on an operation by the operator. In the second processing example, a suppressed alarm useful for resolving the trigger alarm is presented to the operator along with the trigger alarm without the operator performing an operation. The auxiliary information that the operator views can therefore be further optimized, which can further increase the efficiency of operations by the operator to recover from an abnormality.

0061The present disclosure has been explained based on drawings and embodiments, but it should be noted that a person of ordinary skill in the art could easily make a variety of modifications and adjustments on the basis of the present disclosure. Therefore, such changes and modifications are to be understood as included within the scope of the present disclosure. For example, the functions and the like included in the various steps and the like may be reordered in any logically consistent way. Furthermore, steps and the like may be combined into one or divided.

0062For example, the operator may, as necessary, perform an operation to recover from an abnormality based only on the trigger alarm between the processing of step S101 and the processing of step S102 in <figref idref="f0002">FIG. 2</figref> in the above-described first processing example. The processor 11 may then perform the processing from step S102 onward when the abnormality is not resolved by this recovery operation.

0063In the above-described first processing example and second processing example, a suppressed alarm effective for resolving the trigger alarm may be presented to the operator with greater emphasis than the other suppressed alarms. For example, a suppressed alarm effective for resolving the trigger alarm may be displayed with greater emphasis than the other suppressed alarms in <figref idref="f0006">FIG. 6</figref> by way of a mark, text that is colored or in bold, or the like. Furthermore, when a suppressed alarm effective for resolving the trigger alarm is displayed to the operator with greater emphasis than the other suppressed alarms in the first processing example, and the trigger alarm is resolved with a recovery operation by the operator based on the suppressed alarm, then the suppressed alarm may be presented to the operator together with the trigger alarm without the operator performing an operation, as in the second processing example. Specifically, a suppressed alarm effective for resolving the trigger alarm (such as "CPX002.LO") may be displayed with emphasis in the first processing example to enable the operator to notice the suppressed alarm "CPX002.LO" when opening the window of <figref idref="f0006">FIG. 6</figref> and perform an operation to recover from the abnormality in light of the suppressed alarm ("CPX002.LO"). When the abnormality is resolved, the suppressed alarm ("CPX002.LO") may be displayed together with the trigger alarm ("PPX001.LL") without the operator performing an operation, as in the second processing example.

0064In the above embodiment, the operator sets the alarm classification condition. This condition may, however, be set using any type of machine learning, such as a neural network. The alarm management apparatus of the present disclosure may further include a learning unit. Based on the operation history of the operator, the learning unit optimizes the alarm classification condition so that the number of operations necessary for recovery from an abnormality decreases, for example. Subsequently, the learning unit transmits the optimized classification condition to the processor. The processor then updates the classification condition originally described in the definition file to the optimized classification condition. Alternatively, the processor may ask the operator whether to use the classification condition originally described in the definition file or the optimized classification condition. The processor judges whether to use the optimized classification condition based on the response from the operator. The learning unit can be implemented using one or more processors.

0065An alarm management system A may be configured to include the alarm management apparatus 1, the operation monitoring terminal 2, and the engineering terminal 5 according to the above embodiment.

INDUSTRIAL APPLICABILITY

0066The present disclosure can provide an alarm management apparatus, an alarm management system, and an alarm management method that can increase the efficiency of operations by the operator to recover from an abnormality.