Automation Glossary • Sequence-of-events display

What Is a Sequence-of-Events Display?

Merobix Engineering • • 7 min read

When a plant trips, the first question is almost always the same: what happened first? The answer decides whether a shutdown was caused by a genuine process problem, a failed instrument, or a nuisance that should never have taken the unit offline. A sequence-of-events display is the screen built to answer that question. It presents the digital events surrounding a trip in exact time order, stamped to the millisecond, so an engineer can read the chain of cause and effect instead of guessing at it. This guide explains what an SOE display shows, why fine time resolution matters, and how the underlying data is captured and presented.

Back to Blog

Sequence-of-events display in one line: A sequence-of-events (SOE) display is a chronological, high-resolution list of digital status changes - contacts opening and closing, trips firing, permissives dropping - each stamped with a precise time, usually to the millisecond. Its purpose is to reveal the exact order in which events occurred during a trip or upset, so operators and engineers can identify the true first cause rather than the many effects that cascaded from it.

What the Display Shows and Why Order Matters

An SOE display is essentially a time-ordered log of discrete events. Each line records a single digital transition - a level switch making, a trip relay operating, a valve limit switch changing state - together with the tag or description of the point and a timestamp fine enough to separate events that happen within the same fraction of a second. Read top to bottom, the list tells a story: this pressure switch tripped, then the shutdown logic acted, then these valves closed, then the compressor coasted down. The value of the display is that it puts those events in their true order rather than the order a slow scan happened to notice them.

That ordering is the whole point, and it is captured in the idea of the first-out event: the first abnormal transition in the chain, the one that actually initiated the trip. Everything after it is a consequence. If a burner management system takes a furnace offline, an engineer needs to know whether the flame scanner dropped out first and caused the trip, or whether the fuel valve closed first for another reason and the loss of flame was merely a result. Those two stories point at completely different faults, and only a display that preserves the real sequence can tell them apart.

Because the events are digital and time-stamped, an SOE display is deliberately narrow and precise rather than broad. It does not try to show analog trends, faceplates, or process graphics; it shows what changed state and exactly when. That focus is what lets an investigator scan a trip and reconstruct it in minutes, treating the list as the authoritative timeline against which every other piece of evidence is checked.

How It Differs From an Alarm Summary

At a glance an SOE display and an alarm summary look similar - both are scrolling lists of time-stamped lines - but they answer different questions and are built to different standards. An alarm summary exists to manage the operator's attention in real time: it shows what is currently abnormal, what has been acknowledged, and what needs a response, and its timestamps are typically taken when the supervisory system processed the alarm, which can lag the real event by a full scan or more. That is perfectly adequate for driving a response, but it is not precise enough to prove which of two near-simultaneous events came first.

An SOE record is built for forensics rather than response. Its timestamps are captured as close to the physical contact change as possible, often in the input hardware itself, and its resolution is fine enough - typically milliseconds - to separate events that an alarm summary would lump into the same instant. It also records raw state changes regardless of whether they were configured as alarms, so an event that mattered to the trip but was never alarmed still appears in the sequence. The alarm summary tells the operator what to do now; the SOE display tells the investigator what happened.

In practice the two coexist. During an upset the operator works from the alarm summary and any first-out annunciation to stabilize the plant, and afterwards the engineering team turns to the SOE record to establish root cause. Keeping the roles separate matters, because trying to use an alarm list as a forensic timeline leads to wrong conclusions when its coarse timestamps reorder events that the SOE record would have shown in their true sequence.

Capturing SOE Data in the Field and the Cloud

The accuracy of an SOE display is set long before the data reaches a screen, at the moment each contact change is time-stamped. High-quality SOE capture puts the clock as close to the signal as possible: dedicated SOE input modules, or PLC and RTU inputs with hardware time-stamping, record the instant a contact changes rather than the instant a scan later happened to read it. For those timestamps to be comparable across different devices, every clock in the system has to agree, which is why SOE capture depends on tight time synchronization - historically from GPS or a dedicated time source, and increasingly from network time protocols - so that an event on one panel can be ordered correctly against an event on another.

Once captured, the events flow up to be stored and displayed. The events are buffered locally, then reported to the supervisory system, which is why a well-designed SOE chain can survive a communications hiccup: the field device holds the time-stamped events and forwards them when the link recovers, preserving the original times even though they arrived late. The display then merges events from many sources into a single ordered list, and the quality of that merge is only as good as the synchronization behind it.

For distributed oil and gas operations, where the events that matter are scattered across wellpads, compressor stations, and remote panels, a cloud SCADA platform such as Merobix is a natural home for the resulting record. Time-stamped events reported from the field are gathered centrally, so an engineer investigating a trip at a remote site sees the sequence on the same displays they use every day, without travelling to the site to pull a local log. Because the events carry their field-captured timestamps, the central view can order events from several sites into one coherent timeline, and because the record is retained in the platform's history it remains available for the after-the-fact analysis that a shutdown investigation demands. The value of the cloud is not in capturing the millisecond - that still happens in the field - but in assembling every site's events into one place where the sequence can actually be read.

Frequently Asked Questions

What is the difference between an SOE display and an alarm summary?

An alarm summary manages the operator's attention in real time, showing what is currently abnormal with timestamps taken when the supervisory system processed each alarm. An SOE display is a forensic record: its timestamps are captured close to the physical contact change, usually to the millisecond, so it can prove the true order of near-simultaneous events. The alarm list tells the operator what to do; the SOE display tells the investigator what happened.

Why does millisecond resolution matter for an SOE record?

During a trip, many events happen within a fraction of a second, and only the first one is the real cause; the rest are consequences. If timestamps are only accurate to a full scan, those events get lumped together or reordered, and the investigation blames an effect instead of the cause. Millisecond resolution keeps the events separated so the genuine first-out event can be identified.

How are sequence-of-events timestamps kept accurate across different devices?

Each event is time-stamped as close to the physical signal as possible, often in dedicated SOE input hardware, and every device's clock is kept synchronized to a common time source such as GPS or a network time protocol. This shared clock is what lets an event captured on one panel be ordered correctly against an event on another. Without tight synchronization, timestamps from different devices cannot be trusted to reflect the real sequence.

From Definitions to a Live Dashboard

Merobix reads your field devices into a cloud SCADA - the real thing behind these terms, live in days from any browser.

Request a Free Demo +1 (903) 307-7300
More in Automation Glossary
Trend cursor  •  Setpoint & limit markers  •  Home display  •  Logarithmic trend axis  •  Grayscale HMI background  •  Soft key  •  All Automation Glossary →
Free SCADA operator training
Merobix University - 70 video lessons & 261 quiz questions, from first login to compliance reporting. No demo call required.
Start free →