Otops

Overview

OTOps provides unified Operational Technology and ICS monitoring across all log sources. Events from SCADA systems, PLCs, DCS controllers, and HMIs are aggregated into a single dashboard with consistent severity levels.

App Function

• Aggregate OT/ICS events from installed vendor apps
• Provide unified dashboard for cross-vendor OT visibility
• Assign severity levels based on Event Type
• Alert on safety events and security threats

Vendor Documentation

This is a LogZilla aggregate app. No external vendor documentation applies.

Device Configuration

No device configuration is required. OTOps automatically processes events from any app that sets Event Class containing OT.

Incoming Log Format

OTOps processes events tagged by vendor apps. It does not parse raw log formats directly. Vendor apps set:

• Event Type: Safety, Alarm, Process Control, Maintenance, Threat

Parsed Metadata Fields

Severity Level Assignment

Log Examples

Safety Interlock

text
Wrap: OnCopyFullscreen
safety-plc: Safety interlock triggered on reactor-01, emergency shutdown

Process Alarm

text
Wrap: OnCopyFullscreen
scada: High temperature alarm on heat-exchanger-03, value=185C threshold=180C

Unauthorized Access

text
Wrap: OnCopyFullscreen
ot-security: Unauthorized Modbus write to PLC-001 from 192.168.100.50

Dashboard

The OTOps dashboard provides:

• Key metrics: Total events, safety, alarms, process control
• Unique devices and controllers
• EPS gauge and time chart for rate monitoring
• Event Type distribution over time
• Top devices, vendors, and programs
• Severity distribution
• Live event stream with OT context

Triggers