Correlation 💡

The alarms presented by Canopsis are accompanied by additional information that determines whether they are the cause or consequence of another alarm.

The correlation can take place at several levels:

• Thanks to repository information describing links between components
• Thanks to management rules defined by users/administrators
• Thanks to control rules validated by application managers

From an operational point of view, alarms that depend on each other can be grouped together in meta-alarms
on an alarm list, in the PLCs. The basic functions can also be applied in bulk whenever possible.

This correlation results in a significant reduction in the number of alerts presented to the user.

For more information on correlation, visit our dedicated article or the Canopsis documentation.

✅ Update 2024: Pre-correlation time window

Canopsis now allows you to introduce a delay before correlations are performed. As a result, when an alarm is eligible for a correlation rule, it will not be activated until the desired time delay has elapsed.

Update 2027: Automatic correlation

While it is possible today to create meta-alarms with predefined rules, automatic correlation will make it possible to do so solely with the help of data derived from machine learning.