Historian Getting Started Guide

Version 7.0 SP6

May 2018
Historian Getting Started Guide
© 2018 General Electric Company.

GE, the GE Monogram, and Predix are either registered trademarks or trademarks of General Electric Company.
All other trademarks are the property of their respective owners.

This document may contain Confidential/Proprietary information of General Electric Company and/or its suppliers
or vendors. Distribution or reproduction is prohibited without permission.

THIS DOCUMENT AND ITS CONTENTS ARE PROVIDED "AS IS," WITH NO REPRESENTATION OR WARRANTIES OF ANY
KIND, WHETHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF DESIGN, MERCHANTABILITY,
OR FITNESS FOR A PARTICULAR PURPOSE. ALL OTHER LIABILITY ARISING FROM RELIANCE UPON ANY INFORMATION
CONTAINED HEREIN IS EXPRESSLY DISCLAIMED.

Access to and use of the software described in this document is conditioned on acceptance of the End User
License Agreement and compliance with its terms.
Contents

Historian Overview 7
Historian Overview 7
Historian System Architecture 9
System Components 10
Related Documents 14
Standard and High-Availability Configurations 16
Standard and High-Availability Configurations 16
Standard Historian Architecture 16
Single Node Data Only System 16
Data Collection from SCADA Systems and other Programs 17
Integration with Client Programs 17
High-Availability Architecture 18
Historian Data Mirroring 19
Historian in a Cluster Environment 21
Setting Up the Historian Environment 22
Setting Up the Historian Environment 22
Historian Licenses 22
Hardware Requirements 24
Hardware Requirements for Historian Enterprise, Mirroring 26
Historian Server Sizing Recommendations 26
Sustained Event Rate Example System 29
Historian Collector Configuration Recommendations 29
Optimizing Virtual Memory 30
Software Requirements 30
Supported Browsers 32
Historian and Microsoft® Windows® 32
VMWare Support 33
Compatibility with Other GE Products 34
Additional Setup Information 35
Regional Settings Support 35
Time and Date Formatting 35
Datatype Support 36
Enabling Trust for a Self-signed Certificate on Chrome 36
Installing Historian 38
Historian Installation 38
Historian Startup Procedure Overview 38
Historian Installation Limitations 40

Historian Getting Started Guide iii

 Installing a Single Server Historian 40
Installing Historian Single Server Using Command Line 42
Single Server Historian Architecture 42
About Historian Log Files 43
Installing Historian using the Command Line 44
Install Command-Line Syntax 44
Install Command Examples 46
Installing Historian in a Mirrored Environment 47
Installing Historian Mirror Primary Server 47
Installing Historian Mirror Primary Server Using the Command Line 49
Installing Historian Mirror Node 49
Installing Historian Mirror Node using the Command Line 51
Archive Duration Property Change in a Mirrored Environment 51
Mirroring FAQs 51
Installing Historian with LDAP Integration 53
Configuring Historian to use LDAP via SSL 58
Method 1: Add the Certificate to the UAA Server Keystore and Refer to It 58
Method 2: Skip Certificate Verification (less secure) 59
Installing Historian in a Cluster Environment 60
Installing Historian in a Cluster Environment 60
Configuring Historian Cluster Service on Windows Server 2008 60
Adding User-defined Resource Types to the Cluster Instance 60
Adding Historian Service to the Cluster 61
Adding Alarm Archiver Resource to the Cluster 63
Configuring Generic Services 64
Installing Historian Components 67
Installing Historian Components 67
Installing Historian Client Tools 67
Installing Historian Data Collectors 69
Installing a Collector Silently using the Command Line 70
Configure OPC Collector Support for Remote OPC Servers 73
Searching for a Remote OPC Server ProgID 74
Offline Configuration for Collectors 74
Configuring Collector and Tag Properties 74
Collector Interface Properties 75
Tag List and Tag Properties 78
Installing the Historian Excel Add-in 81
Activating the Add-In for Microsoft Excel 2016/2013/2010 82
Activating the Add-In for MS Excel 2007 83
Activating the Add-In for MS Excel 2003 84
Installing Alarms and Events 84
Using a Remote SQL Server to Store Alarms 85

iv Historian Getting Started Guide

 Installing the Historian Administrator 85
Starting the Historian Non-Web Administrator 86
Installing the Historian HDA Server 86
Installing Historian SDK 87
Installing the Historian Client Access API 87
Migrating Historian Data 89
Migrating the Alarms and Events Database from 4.5 to 7.0 89
Backing Up Alarm and Event Data 89
Migrating Historical Alarm and Event Data after Upgrade from 4.5 89
Uninstalling Historian 90
Using the Migration Tool 90
Migrating Historical Data 91
Configuring Migration Options 91
Data Migration Scenarios 93
Migrating a Tag and its Data 94
Merging a Historian Server 94
Migration Tool Command-Line Syntax 95
Creating a Batch File to Migrate Multiple IHA Files 96
Interoperability of Historian Versions 97
Implementing Historian Security 98
Implementing Historian Security 98
About Protecting Your Process 98
Strict Authentication 99
Security Strategy Guidelines 100
Setting Historian Login Security 100
Historian Security Groups 101
Security Setup Example 103
Setting Up Historian Security Groups 104
Using the UAA Config Tool 106
Adding a UAA User 108
About Domain Security Groups 109
Configuring Data Archiver to use Active Directory Service Interface 111
Establishing Your Security Rights 113
Implementing Tag Level Security 115
Retrieving Data from Historian 116
About Retrieving Data from Historian 116
Sampling Modes 116
Calculation Modes 119
Query Modifiers 121
Filtered Data Queries 123
Filter Parameters for Data Queries 124
Filtered Queries in the Excel Add-in Example 126

v
 Filtering Data Queries in the Excel Add-in 126
UAA LDAP Integration Configuration Tool 128
Troubleshooting 133
Managing Historian Log Files 133
Troubleshooting Historian 135
Troubleshooting Strict Authentication Issues 135
Troubleshooting Historian Server Components 135
Troubleshooting a Historian Cluster 136
Troubleshooting iFIX and Historian 136
Troubleshooting OPC Data Collectors 137
Troubleshooting Historian 7.0 with PHA/PKC 6.0 137

vi Historian Getting Started Guide

Historian Overview

Historian Overview
Historian is a high-performance data archiving system designed to collect, store, and retrieve time-based
information at extremely high speed. The system architecture consists of the following:
Historian The Historian server is the central point for managing all of the client and collector interfaces,
Server storing and (optionally) compressing data and retrieving data. All tag data (numbers, strings,
blobs) are stored in a proprietary format in Data Archives. Each Data Archive represents a specific
time period of historical data. You can further segregate your tags and archives into Data Stores.
A Data Store is a logical collection of tags used to store, organize, and manage tags according
to the data source and storage requirements. A Data Store can have multiple data archives,
and includes logical and physical storage definitions.
The primary use of data stores is segregating tags by data collection intervals. For example,
you can put name plate or static tags where the value rarely changes in one data store, and
put process tags in another data store. This can improve query performance.
Historian data archives are data files with the extension *.iha, each of which contains data
gathered during a specific period of time. Archives are generally time-based, such as daily
archives.
The Historian Data Archiver is a service that indexes all information by Tagname and Timestamp
and stores the result in an *.iha file. The Tagname is a unique identifier for a specific
measurement attribute. For iFIX users, a Historian Tagname normally represents a Node.Tag.Field
(NTF). Searching by Tagname and Time Range is a common and convenient way to retrieve
data from Historian. If you use this technique to retrieve data from the Archiver, you do not need
to know which archive file on the Historian server contains the data. You can also retrieve data
using a filter tag.
Historian is capable of storing many different data types, such as Float, Integer, Strings, Byte,
Boolean, Scaled, and BLOB (binary large object data type). The source of the data defines the
ability of Historian to collect specific data types. If licensed for the Alarm and Event option, then
the server also manages the storage and retrieval of OPC alarms and events in a SQL Server
Express.

Collectors The Historian includes several types of data collectors for collecting data from a wide variety
of applications including: iFIX, OPC, OPC HDA, OPC UA Data Access (Windows), OPCUA (Linux),
OPC Alarms & Events, Text Files (.csv or .xml), and OSI PI.

Note: To collect data from CIMPLICITY, you must use the Historian OPC collector with the
CIMPLICITY OPC Server.

The Calculation collector is designed to perform math and analysis on Historian data and store
the results in tags, on the server. The Server-to-Server collector has the same calculation
capabilities as the Calculation collector, but it stores the results in tags, on a remote server.
Most collectors are capable of performing first-order deadband compression as well as a browse
and add configuration, and store and forward buffering.

© 2018 General Electric Company. 7

 Note: Standard Collectors that are included as part of the product will not consume a CAL
(Client Access License). Other interfaces developed by customers or system integrators
using the Collector Toolkit or APIs will consume a CAL for each instance or connection.

Historian Data Collector Cloud (Bi – Modal) Connectivity:

In principle, all Historian Data Collectors read data values from a specified source and write
them to a Historian Server. Some of the Historian Data Collectors are Bi-Modal collectors. This
means most of the Collectors have the capability to write Time Series data either to GE Historian
Server or to a Predix Time Series Service on Cloud. This can be done by changing the Collector’s
destination configuration either as Historian or Time Series at the time of collector installation.
The configuration screens would vary based on the selection.
There are a few differences in the working of a Bi-Modal collector based on whether the
destination is Historian or Time Series service. Following table explains those differences.

Functionality Destination - Historian Destination - Predix TS Service

Mapping Source Tags User needs to map tags in As it is not possible to map tags in the
with Destination Tags Historian Server to Data Cloud with tags in the Data Source, user
(Add Tags) Source tags using one of must select if mapping should be done
the Admin tools (VB through Historian (works as a proxy) or
Admin/Web Admin). Once through Offline Configuration File at the
it is done, the data time of installation.
collection begins. The data
If the user selects Historian, then tags will
gets stored in IHA files and
be created in the Cloud which in turn may
the Tag configurations are
have been mapped through one of the
stored in IHC files.
Admin tools (VB Admin/Web Admin).
If Offline Configuration File is selected,
the user must provide an XML
configuration file containing tag
configurations that need to be created in
the Cloud for mapping them with the
Source tags.

No tag management operations are

Other Tag It is possible to do all tag
allowed.
Management management operations.
Operations such as
delete, rename, data
cleaning ...

Data Type support All standard data types All other data types, excepting arrays,
specified in the e-book are enums and User defined types (UDT),
supported. BLOB, are supported.

The following collectors support Bi-Modal connectivity through installation:

• OPC DA Collector
• OPC HDA Collector
• OPC UA DA Collector
• OSI PI Collector
• Server 2 Server Collector (S2S/S2C)
• Wonderware Collector

8 © 2018 General Electric Company.

 • Cygnet Collector
For information on Predix Time Series Service, refer to Predix Time Series.
Mandatory properties for Cloud collectors
Mandatory properties (PI to Cloud, OPCUA to Cloud)
Tagname, DataType and Source Address
Mandatory properties (Server to Cloud)
Tagname, DataType, Source Address and CalculationDependency
All other properties are not mandatory.
ZIP compression:
Zip compression is available for Cloud collectors so that the JSON Payload can be compressed
with a reduced network bandwidth. Following are the registry keys available for compression:
JsonPayloadGzipCompression: Use this registry key to reduce the network usage while the
data is transferred from collector to cloud.
Default value: 0, means no compression (if registry key does not exist)
Valid values: 1 to 9. 1 is minimal compression and 9 is maximum compression.
Data Type: DWORD
Registry key for Max send queue size
CloudMaxOutstandingMsgs: Use this registry key to configure the Max send queue size.
Default value: 512
Valid values: 24 to 512
Data Type: DWORD
Registry key to save messages in failed queues
FailedMsgQueueEnabled: Use this registry key to save messages in failed queues as backup.
This is done when any message fails for any unexpected reason.
Default: 0 (Disabled). (if no registry key)
Valid Values: 0 (Disabled) or 1(Enabled)
Data Type: Binary

Clients All client applications retrieve archived data through the Historian API. The Historian API is a
client/server programming interface that maintains connectivity to the Historian Server and
provides functions for data storage and retrieval in a distributed network environment.

Historian System Architecture

This diagram illustrates the Historian system architecture:

© 2018 General Electric Company. 9

 System Components
A typical Historian system contains several components:
• One or more Historian Data or Alarm Collectors to data sources
• One or more Historian Servers for data or alarms
• One or more Historian Administrators
• One or more Historian Admin Consoles
• Historian OLE DB provider
• One or more Historian HDA Servers
• One or more Historian Diagnostic Manager
• One or more Historian Client Manager (Mirror systems only)
• Historian Configuration Manager (Mirror systems only)
• Historian Embedded PostgreSQL Database
• Historian Embedded Tomcat Container
• Historian Indexing Service
• One or more Excel Add-In packages, installed on any client node
• Programs using Historian User API
• Programs using Historian Web REST API
• Programs using Software Development Kit (SDK)
All clients communicate with the Server through the Historian API. This list describes the functions performed
by each component:

10 © 2018 General Electric Company.

 Historian Alarms Historian Alarms and Events provides tools to collect, archive, and retrieve alarm and
and Events event data in Historian.
Refer to the Historian Alarms and Events e-book for more information.

Historian Data Data Collectors gather data from a data source on a schedule or event basis, process
Collectors it, and forward it to the Historian Server or a Web socket for archiving. The following
collector functions are common across all types of collectors (except the File Collector):
• Maintaining a local cache of tag information to sustain collection while the server
connection is down.
• Automatically discovering available tags from a data source and presenting them
to the Historian Administrator.
• Buffering data during loss of connection to the server and forwarding it to the
server when the connection is restored.
• Optionally, automatically adjusting timestamps for synchronizing collector and
archiver timestamps.
• Supporting both collector and device time stamping, where applicable.
• Scheduling data polling for polled collection.
• Performing a first level of data compression (collector compression).
• Responding to control requests, such as requests to pause or resume collection.
• Options to send data to Historian or Cloud service through a Web socket connection
For mission-critical data collection, redundant collectors are possible. Historian includes
a mirroring option for high availability and load balancing, so the data is available for
the organization all the time.
Refer to the Historian Data Collectors e-book for more information.

Historian File File Collectors import .CSV or .XML files into Historian. The files can contain data, alarms,
Collector tagnames, or other configuration information, and messages that you can import
with a File Collector.
Refer to the Historian Data Collectors manual for more information.

Historian
A Historian Administrator provides a graphical user interface for performing Historian
Administrator
maintenance functions in a Windows environment including:
• Tag addition, deletion, and configuration.
• Maintaining and backing up archive files.
• Data collector configuration.
• Security configuration.
• Searching and analyzing system alerts and messages.
• A Calculation Collector with the ability to create a new tag based on calculations,
and stores the result as time series data – available with the Historian Administrator
only.
• Setting up your OPC HDA Server – available with the Historian Administrator only.
Refer to the Using the Historian Administrator manual for more information.

Historian Web The Historian Web Admin now operates in a web-based environment. The Historian
Admin Console Web Admin Console provides an enhanced Dashboard that displays the health of the

© 2018 General Electric Company. 11

 system in one convenient location. The Dashboard is available in the Web Admin
Console only. You can view the following diagnostics details:
• Data Node Diagnostics – Displays the Historian servers connected to the system.
• Collector Diagnostics – Displays the details of the faulty collectors.
• Client Diagnostics – Displays the top five busiest clients connected to the system.
The Dashboard provides Interactive Configuration management, which helps you
configure mirror nodes (available in the Web Admin Console only), Tags, Collectors,
Data Stores and Archives. The functionality of the Calculation Collector and the ability
to configure your OPC HDA Web server are not included in the Web Administrator.
The Historian Admin Console uses a client-access license (CAL).

Historian Server Historian Server performs the following tasks:

• Manages all system configuration information.
• Manages system security, audit trails, and messaging.
• Services write and read requests from distributed clients.
• Performs final data compression.
• Manages archive files.

Historian The Historian Diagnostics Manager monitors the health of the Historian system and
Diagnostics executes a few rules on the nodes, collectors, and clients, and generates the
Manager appropriate fault record. The details of these faults are displayed in the Admin Console
Dashboard.
The following are the faults and their severity level:

Fault Type Fault Description Fault Level

Collector Status Fault Generated when the collector Error
goes to the Unknown or Stopped
state.
Collector Overrun Fault Generated when at least one Warning
overrun occurs on a collector in
last 24 hours.
Collector OutOfOrder Fault Generated when at least one Information
OutOfOrder occurs on a collector
in last 24 hours.
Collector StoreForward Fault Generated when the collector Information
Last Data Sample Time Stamp is
delayed by more than an hour.
Collector ConnectDisconnect Generated when the collector is Information
Fault Disconnected and connected at
least once in last 24 hours.
Service DiskSpace Fault Generated when a node disk Warning
space is about to reach its free
space limit.
Client InActive Fault Generated when a client is not Information
active for the last one hour.

12 © 2018 General Electric Company.

 Fault Type Fault Description Fault Level
Client BusyRead Fault Generated when the client Information
makes relatively more number
of reads per minute.
Client BusyWrite Fault Generated when the client Information
makes relatively more number
of writes per minute.
Client TimedOutRead Fault Generated when the client Warning
makes a timed out read query.

Historian Client The Historian Client Manager acts as the client connection manager and message
Manager router for the system. The Client Manager will examine messages and forward them
to the correct Data Archiver or to the Configuration Manager. This service is deployed
only for mirrored systems.

Historian The Historian Configuration Manager maintains and distributes the entire System
Configuration configuration. There can be multiple Historian nodes but only one Configuration
Manager Manager. This Configuration Manager node is used to store system configuration,
such as tag names, collector names and Historian Node names. This service is deployed
only for mirrored systems.

Historian An instance of Tomcat is used exclusively by Historian as an open source Java-based

Embedded Tomcat Web server to support the Historian Web Administrator and Trend tool. It supports
Container SSL and the use of certificates for enhanced security.

Historian An instance of PostgreSQL is used exclusively by Historian to store tag names to

Embedded improve searching for tags in the Trend tool and Web Admin Console.
PostgreSQL
Database

Historian Indexing This is an indexing service that periodically runs against the Historian tag database,
Service creates a tag index, and stores information in the PostgreSQL database instance, a
preferred method to allow for quick search results.

Excel Add-In The Historian Excel Add-In is a very useful tool for presenting and analyzing data
stored in archive files. Using this tool, you can design custom reports of selected data,
automatically process the information, and analyze the results. You can also use it
for performing tag maintenance functions in Historian, such as adding tags, importing
or exporting tags, or editing tag parameters.
For more information, refer to the Using the Historian Excel Add-In e-book.

Historian OPC The Historian OPC HDA Server reads the raw data stored in Historian and sends it to
HDA Server the connected OPC HDA clients. The Historian OPC HDA Server is in compliance with
OPC Server HDA 1.20 standards.
Refer to the Historian OPC HDA Server manual for more information.

© 2018 General Electric Company. 13

 Historian User API The Historian User API is intended to provide high speed read/write access to Historian
data and read access to Historian tags. There is no access to alarms, events, or
messages.
Use the API to develop applications in C or C++, which read and write data to the
Historian server when the Historian SDK and Historian OLEDB do not meet your project
requirements for performance or programming language.
Historian allows you to develop both 32-bit and 64-bit User API programs.

Note: If you want to build a 32-bit User API program on a 64-bit operating system,
then you need to rename the ihuapi32.lib to ihuapi.lib and include it
in your program.

Refer to the ihUserApi Help system for more information.

Historian Web Historian includes a REST API to connect your Java Web Client with Historian data.
REST API Refer to the Historian REST API Reference Manual in the /Additional
Documentation folder of your installation directory for more information.

Historian SDK The Software Development Kit (SDK) is designed for writing Visual Basic (VB) or Visual
Basic for Applications (VBA) Scripts. Using the SDK, you can develop your own scripts
to perform selected repetitive or complex tasks or to make your own custom user
interface. To use the SDK, create a VB/VBA project with the SDK as a project reference.
Refer to the SDK Help system for more information.

Historian Client Most applications today rely on .NET based development platforms from Microsoft.
Access API To enable easier integration with Historian, a .NET API is provided. The Client Access
API supports both 32-bit and 64-bit Windows Operating Systems.

Collector Toolkit The Collector Toolkit allows you to write programs that integrate tightly with Historian
and leverage the same configuration tools, redundancy schemes, and health
monitoring as collectors that ship with Historian. A custom collector is a collector
developed using the Collector Toolkit. It collects data and messages from a data source
and writes them to a Data Archiver. Each deployment of a Collector developed on the
Collector Toolkit consumes a CAL.

Historian Historian provides migration tools to allow you to migrate your existing Classic Historian
Migration Tools configurations and data and your iFIX Alarm and Event data into the Historian
environment. Tags, collection rates, and dead bands for tags configured in Classic
Historian can be transferred into Historian by the migration tools.
For more information, refer to the Migrating Advanced and Classic Historian Data
e-book.

Related Documents
For additional information about Historian, see the following documents:
• Historian Getting Started Guide
• Historian Important Product Information (IPI)
• Using the Historian Administrator
• Historian Data Collectors

14 © 2018 General Electric Company.

 • Using the Historian Excel Add-In
• Historian Alarms and Events
• Migrating Advanced and Classic Historian Data
• Using the Historian OLE DB Provider
• Historian Software Development Kit (SDK) Online Help System
• Historian REST APIs Reference Manual

© 2018 General Electric Company. 15

 Standard and High-Availability Configurations

Standard and High-Availability Configurations

You have wide flexibility in configuring the Historian system. Since Historian can support a fully distributed
architecture, you can spread the data collection, server, administration, and client data retrieval functions
across many different nodes in a network, or you can install all components on a single computer.
Since the Historian API is the basic building block for connectivity, all Historian functions, including data
collection, administration, and data retrieval, use the Historian API.
You can connect the Historian API to a local Historian Server in the same manner as to a remote Historian
Server by simply providing the name of the server. This name must be the Computer Name or IP Address
of the target Historian Server, and the server must have TCP/IP connectivity. If you use the Computer Name
of the server rather than the IP Address, the IP Address must be available to the client through DNS, a WINS
server, or through the local host table.
It is recommended that you install the Historian Server on a central dedicated server, as shown in the Typical
Historian System figure. Next, install data collectors on each data source, and point them back to the central
Historian Server by specifying the appropriate server Computer Name. Install a separate data collector for
each type of collection interface used in your system.
You can also have mirroring of stored data on multiple nodes to provide high levels of data reliability. Data
Mirroring also involves the simultaneous action of every insert, update and delete operations that occurs
on any node.
You can install various types of collectors on a single computer, subject to constraints detailed in Installing
Historian Data Collectors on page 69.

Standard Historian Architecture

Standard Historian offers unique capabilities and benefits for a sustainable competitive advantage:
• Built-in Data Collection
• Fast Read/Write Performance speed
• Enhanced Data Security
• Robust Redundancy and High Availability
The following topics give you a quick insight to different use cases to consider when deploying your Historian
architecture.

Single Node Data Only System

In a typical single node system, OPC Server or HMI is responsible for the collection of data. This data is used
for trending and analyzing as illustrated in the following figure:

16 © 2018 General Electric Company.

 Figure 1: Single Node Data Only System

Data Collection from SCADA Systems and other Programs

This diagram represents how data is collected from SCADA systems and other custom programs. The
collected data is used for calculations and analysis.

Figure 2: Enterprise Data Collection Examples

Integration with Client Programs

This diagram represents the integration with external client programs.

© 2018 General Electric Company. 17

 Figure 3: Data Collection and Client Connection Examples

High-Availability Architecture
This diagram shows a high-availability system with collector redundancy and Mirrored Historians:

18 © 2018 General Electric Company.

 Figure 4: High Availability Example

You can mirror stored data on multiple nodes to provide high levels of data reliability. Data Mirroring involves
the simultaneous action of every insert, update, and delete operation that occurs on any node. Historian
allows you to have up to three mirrors, a primary and two additional mirrors.

Historian Data Mirroring

If you have purchased an Enterprise-level license for Historian and your license entitlement includes mirror
nodes, you have the option of setting up to three mirrors (primary server + two mirrors).
Historian Data Mirroring provides continuous data read and write functionality. In a typical data mirroring
scenario one server acts as a primary server to which the clients connect.
To create a mirror, you add mirror nodes and establish a data mirroring session relationship between the
server instances. All communication goes through the Client Manager, and each Client Manager knows
about the others.
Mirrors must be set up in a single domain.

© 2018 General Electric Company. 19

 Figure 5: Mirroring Example

Client Connections in Mirrored Environments

When a client (either a writing collector or reading client), connects to the Client Manager, it gathers
information about each client Manager along with all archive, tag, and collector configuration information
from the Configuration Manager, and stores this information locally in its Windows Registry.
A relationship is then established between each remote client and a single Client Manager, which directs
read and write requests across the other mirrors. If that relationship is broken, it will establish a new
relationship with the next available Client Manager, which assumes the same responsibilities. This bond is
maintained until that Client Manager is unavailable, and then the process of establishing a relationship with
another Client Manager is repeated.
When more than one node is running, the Client Manager uses a "round robin" method between the good
nodes to balance read loads. Each read request is handled by a node as a complete request.
Writes are sent independently but nearly simultaneously to any available Data Archiver so that the same
tag shares a common GUID, name, timestamp, value, and quality as passed to it by the Collector.

20 © 2018 General Electric Company.

 Read and Write Client with Mirroring

Historian in a Cluster Environment

Historian works with the Microsoft Cluster Service Manager to ensure high availability of the Historian server.
If the primary Historian node in the cluster experiences difficulties, Historian is automatically started on
another node to take over. Server high availability is managed through the Microsoft Cluster Service Manager.
• Read the Important Product Information document and verify that all the prerequisites are properly
installed.
• Configure a failover cluster in Windows Server 2008 R2. See Installing Historian in a Cluster Environment
on page 60. See also Configuring Clusters section in the Using Historian Administrator ebook.
• To use Historian Alarms and Events in a cluster environment, select the appropriate SQL Server for both
the Cluster Nodes.

© 2018 General Electric Company. 21

 Setting Up the Historian Environment

Setting Up the Historian Environment

Before you start setting up your Historian environment, identify the computers that will function as your
clients, data collectors, administration workstations, and archiver.

1. Set up each computer.

See Hardware Requirements on page 24 , and refer to the user manual that accompanies each component
for detailed setup information.
2. Use a login account with administrator rights so that you can install Historian later.
See Software Requirements on page 30, and refer to the user manual that accompanies each software
product for more detailed setup information
3. Activate the License Key on your Historian Server node. Additional licenses may be required on other
nodes (such as mirroring and collector nodes) depending on your configuration requirements. See
Historian Licenses on page 22.
4. Disable the Guest account in Windows security if you want to limit authentication to known Windows
users only.

Historian Licenses

Historian Product License Management

Advantage Licensing is the software system for activating and managing product licenses. Using the tools
in Licensing and our Customer Center web site you can view, activate, and manage licenses at your site.
With Advantage Licensing you can:
• View current licenses for the products residing on a computer
• Choose a licensing method (Internet, local intranet, or file-based)
• Change licenses (Activate, Return, Refresh)

Note: If you received an email containing an activation code, you must migrate to Advantage Licensing.
Get the newest licensing software at http://digitalsupport.ge.com.
If you did not receive an activation code, follow the instructions about M4 keys at
http://digitalsupport.ge.com.

Historian License Editions

Historian is available in three license types: Essentials, Standard, and Enterprise. The Essentials edition is
included as the on-board Historian with the purchase of some iFIX and CIMPLICITY licenses, and cannot be
licensed or sold outside of those packages. Essentials edition customers who require options available in
the Standard or Enterprise editions or require more than a 1000 tags must purchase either a Standard or
Enterprise License with the appropriate tag count.

22 © 2018 General Electric Company.

 You can install all components using the single install media, but the use of specific components and
functionality are controlled by the GE license you purchase and install.
The Historian components and functionality supported by each license type are shown in the table below:

Component Essentials Standard Enterprise

Allow Data Modification Y Y Y
Digital / Enumerated / Array Tags Y Y Y
Excel Add-in Y Y Y
Fault Tolerant Computer Support Y Y Y
Historian Server Y Y Y
Windows Admin Console Y Y Y
Cluster Support - Y Y
Collector Redundancy - Y Y
Collector Toolkit SDK - Y Y
Microsecond Support - Y Y
Multiple Data Stores - Y Y
User Defined Multi-Field Tags - Y Y
Web Admin Console - Y Y
Web Trend Client - Y Y
Data Mirroring - up to 3 (Primary +2) - - Y
Expression Support - - Y
Electronic Signatures - Optional Optional
Maximum Data Stores (200) - - Optional
Historian Client Access Licenses (CALs) 2 5 5
Data Stores 5 10 20
Max Historical Tags 1,000 50,000 20,000,000
SCADA Buffer (2500 tags, 200 days) Y Y Y
iFIX Collector Y Y Y
ME Collector Y Y Y
OLE DB Provider Y Y Y
OPC HDA Server Y Y Y
Server to Server Distributor Y Y Y
Windows PerfMon Collector - Y Y
Calculation Collector - Optional Y
OPC Alarms - Optional Y

© 2018 General Electric Company. 23

 Component Essentials Standard Enterprise
Simulation Collector Y Y Y
OSI PI Distributor - Y Y
GE Data Collector for OPC HDA w/Cloud Option - Y Y
GE Data Collector for OPC UA (DA) w/Cloud Option - Y Y
GE Data Collector for OPC UA Linux (x86) w/Cloud - Y Y
Option
GE Data Collector for OSI PI w/Cloud Option - Y Y
GE Data Collector for Wonderware w/Cloud Option - Y Y
Server to Server Collector w/Cloud Option - Optional Y
Cygnet Data Collector w/Cloud Option - Y Y
OPC DA Collector w/Cloud Option Y Y Y

Note: Historian HD is a separately sold and licensed component from Historian. Historian HD provides
the Historian user a standard method to move Historian tag configuration and historical archive data
from a Windows environment to a Hadoop Distributed File System (HDFS). HDFS is the primary distribution
storage used by Hadoop applications.
A component that is used only by the Historian HD license is installed with your Historian installation:
the Historian Archive Ingestion Service. This service is reserved for use only with the Historian HD big
data analytics platform and is listed as “Manual” under Startup Type. Stopping this service does not
impact Historian functionality. Unless you are licensed to use Historian HD, do not attempt to start or
monitor this service, as it may impact the ability to run the Historian Data Archiver service.
For more information regarding Historian HD, please visit
http://www.ge-ip.com/products/proficy-historian-hd/p3714.

Hardware Requirements
This topic describes hardware requirements for Standard Historian.

Historian Server
For Historian Servers, the minimum hardware requirements are:
• A 2.4 GHz clock-speed Intel Core i3 or i5 or i7 CPU or equivalent AMD Phenom CPU with 8 GB RAM for a
64-bit Historian Server.
• A DVD-ROM drive.
• 80 GB free hard-drive space for the data archives, message files, buffer files, and log files used by the
system.
• 100 Mbps TCP/IP-compatible network interface adapter for network communication and certain I/O
drivers.

24 © 2018 General Electric Company.

 Data Collector Node
For Data Collector nodes, the recommended minimum hardware requirements are:
• A 2.0 GHz clock-speed Intel Core i3 or i5 or i7 CPU or equivalent AMD Phenom CPU with 2 GB RAM.
• 40 GB of free hard-drive space to store buffered data.
• A DVD-ROM drive.
• TCP/IP-compatible network interface adapter for network communication and certain I/O drivers.

Microsoft Windows Server

Many desktop-class computers are not certified to run Windows Server. Check the Microsoft web site and
your computer hardware vendor web site for possible conflicts between your hardware and Windows Server
2008 R2 SP1. These specifications are sufficient to meet the needs of a small pilot application. However,
production system requirements may be significantly different depending on many application-specific
factors. Please contact the Product Manager to review the requirements of your application.

Microsoft Cluster Service

For the Microsoft Cluster service, the minimum hardware requirements are:
• A 2.6 GHz clock-speed Intel Core i3 or i5 or i7 or Xeon or equivalent AMD Opteron CPU with minimum 8
GB RAM.
• 80 GB of local, free hard-drive space.
• 40 GB shared SCSI hard-drive (RAID preferred).
• Two 100Mbit TCP/IP-compatible network interface adapters for network communication and certain
I/O drivers (One for public network, another for private network).

Note: The configuration of each server added to the cluster must be identical to the other servers in
the cluster.

Data Mirroring and Redundancy Service

For the Data Mirroring and Redundancy service, the minimum hardware requirements are:
• Minimum 8 GB RAM.
• Dual Core Processor.
• 64-Bit Operating System.

Note: If you are using single node setup, then it is recommended to use 32 GB RAM.
Ensure that you are using the same hardware requirement for the mirror node as well.

Network Speed
For a large Enterprise Historian setup, it is recommended that network speed is 1 GBPS.

Notes
• If you are using single node setup, then it is recommended to use 32 GB RAM.
• Ensure that you are using the same hardware requirement for the mirror node as well.
• You must have a minimum of 10 GB free space available for the Data Archiver to start.
• Many Desktop-class computers are not certified to run Windows Server. Check the Microsoft web site
and your computer hardware vendor web site for possible conflicts between your hardware and Windows

© 2018 General Electric Company. 25

 Server 2008 R2 SP1. These specifications are sufficient to meet the needs of a small pilot application.
However, production system requirements may be significantly different depending on many
application-specific factors. Please contact the Product Manager to review the requirements of your
application.

Hardware Requirements for Historian Enterprise, Mirroring

The following table describes the hardware requirements for Historian Enterprise, Mirroring and Alarms &
Events:

Hardware Requirements
RAM (GB) 16 GB / 32 GB (recommended)
Disk Size Required 250 GB (Minimum)
Processor Type Intel Core-i5, i7 family, or equivalent
CPU Dual/Quad cores
CPU Speed (GHz) 2.8
Recommended CPU clock in Giga Hz 2.8
Storage Type SAS SSD with RAID Level 0 Configured

Other requirements:
Operating System: Windows 7 (64-bit) or Windows Server 2008 (64-bit) or Windows 2012 Server R2 or
Windows 2016 Server.
Tags: Upto 50K
Years of data online: 1 year

Historian Server Sizing Recommendations

You determine the size of an Historian Server as a function of the number of tags from which data is collected,
the rate of alarm and event collection, and how often you intend to collect the data and how much data
you want to keep online. The number of tags is an indicator of the number of concurrent users likely to
access the system. The primary factor is server memory requirements; CPU load is a secondary factor. If
the number of concurrent users is significantly different from the suggested guidelines, adjust server memory
size accordingly.
The following recommended configurations may vary based on years of data online, update rate, data
compression setting, and other tag configuration parameters.

Notes
• Historian Server runs only on 64-bit versions of Windows.
• When possible, for performance reasons, consider using computers with multiple disk drives so that
archives and buffers can be given their own drive. Or, multiple data stores can each have their own drive.
• Sustained event rate is 18 million per minute.
• Historian supports Intel Core i3, i5, i7 Duo based processors as long as they are compatible with the
operating system.
• Historian does not support Itanium processors.

26 © 2018 General Electric Company.

 The recommended configurations may vary based on years of data online, update rate, data compression
setting, and other tag configuration parameters.
• Recommended Historian Standard Edition Server with <10K Tags on page 27
• Recommended Historian Standard Edition Server with 10K - 50K Tags on page 27
• Recommended Historian Standard Edition Server with 100K to 1 Million Tags on page 27
• Recommended Historian Standard Edition Server with 1 Million to 2 Million Tags on page 28
• Recommended Historian Standard Edition Server with 2 Million to 5 Million Tags on page 28

Recommended Historian Standard Edition Server with <10K Tags

Tags <10K
RAM (GB) 8 GB/16GB (recommended for Single node setup)
Disk Size Required 100 GB/250 GB (recommended)
Processor Type Intel Core-i5, i7 family, or equivalent
CPU Dual/Quad cores
CPU Speed (GHz) 2.8
Recommended CPU clock in Giga 2.8
Hz
Operating System Windows 7 (64-bit) or Windows Server 2008 (64-bit) or Windows 2012
Server R2 or Windows 2016 Server.
Storage Type SAS SSD with RAID Level 0 Configured
Years of data online 1 year

Recommended Historian Standard Edition Server with 10K - 50K Tags

Tags 10K to 50K

RAM (GB) 16 GB / 32 GB (recommended)
Disk Size Required 250 GB
Processor Type Intel Core-i5, i7 family, or equivalent
CPU Dual/Quad cores
CPU Speed (GHz) 2.8
Recommended CPU clock in Giga 2.8
Hz
Operating System Windows 7 (64-bit) or Windows Server 2008 (64-bit) or Windows 2012
Server R2 or Windows 2016 Server.
Storage Type SAS SSD with RAID Level 0 Configured
Years of data online 1 year

Recommended Historian Standard Edition Server with 100K to 1 Million Tags

Tags 100K to 1 Million

© 2018 General Electric Company. 27

 RAM (GB) 16 GB / 32 GB (recommended)
Disk Size Required 250 GB
Processor Type Intel Xeon (56xx, E5 family or AMD Opteron 42xx/62xx family)
CPU Dual/Quad cores
CPU Speed (GHz) 2.8
Recommended CPU clock in Giga 2.8
Hz
Operating System Windows Server 2008 R2 or Windows 2012 standard (64-bit) or
Windows 2012 Server R2 or Windows 2016 Server .
Storage Type Direct attached or shared storage with SAS enterprise class drives.
Hardware RAID controller with cache memory. SAN recommended
over NAS
Years of data online 1 year

Recommended Historian Standard Edition Server with 1 Million to 2 Million Tags

Tags 1 Million to 2 Million

RAM (GB) 16 GB / 32 GB (recommended)
Disk Size Required 500 GB
Processor Type Intel Xeon (56xx, E5 family or AMD Opteron 42xx/62xx family)
CPU 2-Socket
CPU Speed (GHz) 2.6
Recommended CPU clock in Giga 2.6
Hz
Operating System Windows Server 2008 R2 or Windows 2012 standard (64-bit) or
Windows 2012 Server R2 or Windows 2016 Server.
Storage Type Direct attached or shared storage with SAS enterprise class drives.
Hardware RAID controller with cache memory. SAN recommended
over NAS
Years of data online 1 year

Recommended Historian Standard Edition Server with 2 Million to 5 Million Tags

Tags 2 Million to 5 Million

RAM (GB) 32 GB / 64GB
Disk Size Required 500 GB
Processor Type Intel Xeon (56xx, E5 family or AMD Opteron 42xx/62xx family)
CPU 2-socket or 4-socket
CPU Speed (GHz) 2.6

28 © 2018 General Electric Company.

 Recommended CPU clock in Giga 2.6
Hz
Operating System Windows Server 2008 R2 or Windows 2012 standard (64-bit) or
Windows 2012 Server R2 or Windows 2016 Server.
Storage Type High speed shared storage with SAS or SSD drive types. Hardware RAID
controller with cache memory. SAN recommended over NAS.
Years of data online 1 year

Sustained Event Rate Example System

System performance may vary depending on the hardware specifications, operating system, and tuning
parameters. These hardware specifications are provided as a reference only.

Specification Medium Size Server Large Size Server

Processor Type Intel Xeon 5540 Intel Xeon E5-2670 or E5-4650
CPU Dual socket Dual socket or quad-socket
CPU Speed (GHz) 2.5 2.7
RAM (GB) 64 256

Historian Collector Configuration Recommendations

Configuration Item Recommendation

RAM (GB) 8 GB
Disk Size required 80 GB
Historian Collectors 32-bit or 64-bit (GE Data Collector for Wonderware support 64-bit only)
Operating System
• Microsoft® Windows® 7 Professional (32-bit or 64-bit)
• Microsoft® Windows® 8.1 Professional (32-bit or 64-bit)
• Microsoft® Windows® 10
• Microsoft® Windows® Server 2012 Standard (64-bit)
• Microsoft® Windows® Server 2008 R2 (64-bit)
• Microsoft® Windows® Server 2008 R2
• Microsoft® Windows® Server 2012 R2
• Microsoft® Windows® Server 2016

Notes
• Historian Collectors work as 32-bit applications on a 64-bit Windows operating systems using WoW64
mode (Windows-on-Windows 64-bit). However, you can read and write data from a 64-bit Historian
Server.
• RAM and Disk Size required may vary based on the collectors available on the system.
• Recommended number of tags per collector is 20 to 30K.

© 2018 General Electric Company. 29

 • For iFIX systems, count each Node.Tag.Field (NTF) as a separate tag when you determine the size of the
system. For example, FIX.FIC101.F_CV and FIX.FIC101.B_CUALM (current alarm) both count as tags, even
though they are derived from the same iFIX tag.

Optimizing Virtual Memory

Through the use of paging files, Windows allocates space on your hard drive for use as if it were actually
memory. This space is known as virtual memory. Be sure to optimize the virtual memory on the Historian
archiver computer.

Note:
If the paging file is set to grow dynamically, your system may experience severe performance problems
during run time. To ensure optimal performance, be sure that the Initial Size and Maximum Size of the
paging file are the same so that the paging file does not grow dynamically. For more information on
creation and sizing of Windows paging files, refer to the Microsoft Windows Help.

To optimize the virtual memory paging file for Historian in Windows:

1. Double-click the System icon in the Windows Control Panel.

2. Open the Performance Options dialog box:
a) On Windows 7, or Windows 8, or Windows Server 2008, click Advanced System Settings in the left
pane.
b) In the Advanced tab, under Performance, click Settings.
c) In the Performance Options dialog box, click the Advanced tab.
3. In the Virtual Memory group box, select Change.
4. In the Initial Size field, enter a value equal to three times your physical memory.
5. In the Maximum Size field, enter a value equal to three times your physical memory.
6. Select Set.
7. Click OK.

Software Requirements
This topic describes the minimum Historian software requirements.

Microsoft® Windows® Operating Systems

Historian requires one of the following operating systems, with latest service packs or revisions:
• Microsoft® Windows® Server 2016 (64-bit)
• Microsoft® Windows® Server 2012 R2 (64-bit)
• Microsoft® Windows® Server 2008 R2 (64-bit)
• Microsoft® Windows® 7 Professional (32-bit or 64-bit)
• Microsoft® Windows® 8.1 Professional (32-bit or 64-bit)
• Microsoft® Windows® 10 (32-bit or 64-bit)

Note: Historian 7.0 32-bit components such as Collectors, Excel Add-in 32-bit, Interactive SQL 32-bit,
APIs, and Non-Web Administrator work as 32-bit application on 64-bit Windows operating systems

30 © 2018 General Electric Company.

 using WoW64 mode (Windows-on-Windows 64-bit). However, you can read and write data from a
64-bit Historian Server.
If you use Historian 6.0 or later on Windows Server 2008 (32/64-bit) or Windows Server 2008 R2, you
must go for a Full Installation and not Core Installation of Windows.

Network Interface Software

The TCP/IP network protocol is required.

Microsoft®.NET Framework 4.5.1

The installation of .NET 4.5.1 is a prerequisite to the Historian install. You can install it manually or you will
be prompted to download and install it via the Historian install. In order to have .NET 4.5.1 downloaded and
installed as part of the Historian install, your Proxy must be configured for internet access.

Microsoft® SQL Server®

One of the following 32-bit or 64-bit SQL Server systems to configure alarm and event archiving or to use
Historian as a linked server:
• Microsoft® SQL Server® 2008 R2 SP2, Standard, or Enterprise Edition
• Microsoft® SQL Server® 2008 Express
• Microsoft® SQL Server 2008 R2
• Microsoft® SQL Server® 2012 SP3
• Microsoft® SQL Server® 2014 SP1 Express, Standard, or Professional
• Microsoft® SQL Server® 2016 Express, Standard, or Professional

Note: The collation for your Alarm and Event database needs to match the collation of your SQL Server.
This happens automatically by default but can become different if the Alarm and Event Database is
moved to another SQL Server.

Microsoft® Excel®
The Historian Excel Add-In requires one of the following
• Microsoft® Excel® 2007 (32 bit only)
• Microsoft® Excel® 2010 (32 & 64 bit)
• Microsoft® Excel® 2013 (32 & 64 bit)
• Microsoft® Excel® 2016 (32 & 64 bit)

Web Server
Web server requirements are as follows.
• Microsoft®.NET Framework 4.5.2
• Historian Client Tools 7.0 or greater
• OLE DB, User API, and Historian Client Access Assembly

Historian Server
• Microsoft® Windows® Server 2016 (64-bit)
• Microsoft® Windows® Server 2012 R2 (64-bit)
• Microsoft® Windows® Server 2008 R2 SP2 (64-bit)

© 2018 General Electric Company. 31

 • Microsoft® Windows® 10 (64-bit)
• Microsoft® Windows® 8.1 Professional (64-bit)
• Microsoft® Windows® 7 Professional (64-bit)
• Microsoft®.NET Framework 3.5

Note: Historian Server runs on 64 bit only.

Supported Browsers
The following are the supported browsers for Historian Web Administrator and Trend Client:
• Firefox 46+
• Google Chrome39+
• Internet Explorer 11

Historian and Microsoft® Windows®

Optimizing Server Settings

If you are running Historian on a Windows computer, do not set your File and Printer Sharing for the Server
optimization options to Maximum Data Throughput for File Sharing. The Maximize Data Throughput for
File Sharing setting in File and Printer Sharing for Microsoft Networks Properties controls the system
cache size and allows the cache to grow very large. This could cause excessive paging when dealing with
large files and might interfere with applications like Historian.
It is recommended that you select the Maximum Data Throughput for Network Applications option.
To view or change your Server Optimization settings on Windows servers:

1. Open the Control Panel.

2. Double-click the Network and Dial-Up Connections icon.
The Network and Dial-up Connections dialog box appears.
3. Right-click the Local Area Connection Properties icon and select Properties.
4. Select the File and Printer Sharing for Microsoft Networks component and click the Properties button.
5. Ensure that the Maximize Data Throughput for Network Applications option is selected.
6. Click OK.
For more information on changing the Server Service properties, refer to the Microsoft Knowledge Base
article Q228766.

Archiver Obtaining List of Domain Controllers

If the archiver is configured to use domain group security, the data archiver obtains the list of primary and
backup domain controllers at archiver startup. If a domain controller is not available at that time or if you
add new domain controllers, they are not seen by the archiver until the next time the archiver is restarted.
For example, if your backup domain controller was not available on archiver startup, the archiver will not
fail over to the backup domain controller for user authentication.
For more information, refer to the Working with Security section in Online Help.

Windows Firewall Enabled by Default

Windows Firewall is enabled by default in Vista, Server 2003, Server 2008, and Server 2012.

32 © 2018 General Electric Company.

 If you install Historian on any of the given systems, you will be prompted to allow Historian to reconfigure
the Windows Firewall. If you answer Yes, Historian is added to the firewall's exception list and set to Enabled.
If you answer No, Historian is added to the list and set to Disabled. You can change this setting through the
Windows Firewall control panel at any time.

VMWare Support
Historian provides support for VMware ESXi Server version 5.0 and above. The virtualization capability
provided by VMware lets you run multiple virtual machines on a single physical machine, with each virtual
machine sharing the resources of that one physical computer. Please be aware that while we have tested
VMware ESXi 5.0 and above, issues with the VMware software or the virtualized environment are outside
the scope of GE Digital's responsibility. You must use VMWare Compatibility Hardware and Software before
installing Historian 7.0 or greater Data Archiver on a Virtual Machine. For the current release, the only
supported type of Proficy licensing for use with VMware is keyless (software) licensing.

Note: VMware Player is not supported.

Important: Advanced features of ESXi Server (such as VMotion, High Availability, and Clustering support)
have not been tested with Historian.

For information regarding VMWare compatibility and its supported software and hardware environments,
please visit: http://www.vmware.com/resources/guides.html

VMWare Best Practices and Limitations

Disk Growth To prevent disk growth during run time, make sure you pre-allocate the hard disk in
your VMware image.

Important: If the VMware disk needs to grow at runtime because of IHA growth
or creation, the Data Archiver will be slowed. If there is not enough disk space on
the host machine to grow the VMware disk, the archiver may lose data.

Suspended ESXi servers have power meter functions and options as well as the ability to suspend
Images/Power images to conserve power. We do not recommend or support these functions due to
Metered Images the potential effects on the Guest operating system, specifically in regards to polling
I/O and timely updates.

I/O Devices and There are a multitude of devices and methods of communications on the market. These
Connections and devices may be used if you can successfully connect them from the virtual machine
VMware through the physical HOST, but we do not support the setup of that connection. Be
aware that device drivers used to write to proprietary cards for the ESXi HOSTS as part
of virtual device setup can cause issues.

USB Controller The USB controller has these limitations when using Historian and VMware:
Limitations
• Minimum virtual hardware version 7 is required.
• Only one USB controller of each type can be added to a virtual machine.
• The USB arbitrator can monitor a maximum of 15 USB controllers. If your system
includes an additional number of controllers and you connect USB devices to these
controllers, the devices are not available to be passed through to a virtual machine.
• You must add a USB controller to a virtual machine before you can add a USB
device.

© 2018 General Electric Company. 33

 • You must remove all USB devices from a virtual machine before you can remove
the controller

USB Device USB devices have these limitations when using Historian and VMware:
Limitations
• A virtual machine may have up to 20 USB devices attached to it; however, each
unique USB device can only be attached to one virtual machine at a time.
• Unsupported USB devices may not interact as expected with other ESXi features.

Additional GE Digital cannot guarantee the performance of the Historian software in a virtualized
VMware Notes environment due to the wide range of parameters associated with the hardware,
configuration, memory settings, third-party software installations, and the number of
virtual machines running; all of which can affect performance. Therefore, GE Digital
cannot provide support related to the performance of the Historian software running
on a virtual machine if it is determined that the issue is related to the virtual
environment. Also, GE Digital does not provide support or troubleshoot a customer's
virtual machine infrastructure.
It is the responsibility of you, the customer, to ensure that the performance of the
Historian software and any third-party applications (especially those not recommended
by GE Digital) are adequate to meet the needs of your run mode environment. GE Digital
does not support issues related to functionality that is not available as a result of
running in a virtual machine infrastructure. Examples include the functionality of card
level drivers such as those for the Genius® family of drivers, the Allen-Bradley® DH/DH+
drivers, the Cyberlogic's MBX® Driver for the SA85 card, as well as functions requiring
direct video access. Check with the vendor of your third-party application for support
statements regarding that third-party product's ability to run in a virtualized
environment.
For more detailed information regarding VMware specifications and requirements,
visit the VMware web site: http://www.vmware.com/resources/compatibility/search.php.

Compatibility with Other GE Products

Several GE products work with Historian. The following is a general set of required versions to work with
Historian 7.0.

Important: If you want to enable the Strict Authentication feature in Historian 7.0, be aware that you
will need to apply the latest SIMs that support this feature for all Proficy clients that connect to the
Archiver, including the ones listed in this table. In addition, there may be SIMS to allow pre-5.0 collectors
and client applications such as Excel Add-In to connect. Refer to the SIM download page for update
for Historian and other Proficy products.

Product Minimum Required Version

Proficy Portal 3.5 SP2, 3.5 SP3
Machine Edition View 9.0
CIMPLICITY 10.0

34 © 2018 General Electric Company.

 Product Minimum Required Version
iFIX iFIX5.9
Plant Apps PA7. SP2
Smart Signal 6.0
CSense 6.0
Proficy Historian Analysis 6.0 SP1 SIM5 or greater
Proficy Knowledge Center 6.0 SP1 SIM5 or greater

* For customers using iFIX, there was a change in the HKEY_CURRENT_USER registry values for WebSpace
and it will no longer work with the existing SIM. Ensure that you get the latest iFIX SIMs. The following article
provides additional instructions:
https://ge-ip.force.com/communities/en_US/Article/iFIX-Webspace-Strict-Historian-Authentication
** For Plant Apps customers using the ‘Historian Type = ‘GE Proficy – Historian 3.0’
to connect to Historian 7.0, both the Enabled and Disabled options for Enforce Strict Client Authentication
selection are supported.
** For Plant Apps customers using the ‘Historian Type = ‘GE Proficy – Historian’ to connect to Proficy Historian
7.0, only the Disabled option for Enforce Strict Client Authentication selection is supported.
In Historian 5.0, the Historian HKEY_CURRENT_USER registry key values were changed. The programs
accessing the server collection through the SDK are unaffected. Any program or script that directly accesses
the registry keys or any Terminal Server login scripts that try to configure a list of servers by importing
registry keys directly will no longer work. Such programs need to access the server collection via SDK calls,
not directly.

Additional Setup Information

See the topics below for additional setup information.

Regional Settings Support

Historian supports the following regional settings available in the Windows Control Panel:
• Decimal symbol - one character
• Digit grouping symbol
• List separator - one character
• Time style
• Time separator
• Short date style
• Date separator

Time and Date Formatting

Avoid changing the time style or short date style in regional settings to values that are outside of the standard
styles provided. Changing these values to non-standard styles may result in improperly formatted times
and dates.

© 2018 General Electric Company. 35

 Historian supports the following short date formats, some of which may not be available in certain language
versions of Windows:
• dd/mm/yy
• dd/yy/mm
• mm/dd/yy
• mm/yy/dd
• yy/dd/mm
• yy/mm/dd

Datatype Support
The following table lists the supported Historian data types and their sizes:

Data Type Size

Single Float 4 bytes
Double Float 8 bytes
Single Integer 2 bytes
Double Integer 4 bytes
Quad Integer 8 bytes
Unsigned Quad Integer 8 bytes
Unsigned Single Integer 2 bytes
Unsigned Double Integer 4 bytes
Byte 1 byte
Boolean 1 byte
Fixed String Configured by user.
Variable String No fixed size.
Binary Object No fixed size.
Historian does not support the use of the Binary
Object data type with the Data Collectors. Refer to
the SDK online Help for more information on working
with BLOB data types.

Scaled 2 bytes

Enabling Trust for a Self-signed Certificate on Chrome

At install time, a self-signed certificate is generated that you use with Historian web applications. A self-signed
certificate is a certificate that is signed by itself rather than signed by a trusted authority. Therefore, a
warning in the browser appears when connecting to a server that uses a self-signed certificate until it is
permanently stored in your certificate store.

1. In the Google Chrome browser go the site to which you want to connect.
A warning box appears to inform you that that the certificate is not trusted by the computer or browser.

36 © 2018 General Electric Company.

 Click the gray lock to the left of the URL, and then select the Details link. The Security Overview screen
appears.
2. Click the gray lock to the left of the URL, and then select the Details link.
The Security Overview dialog appears.
3. Click the View certificate button.
The Certificate window appears with three tabs: General, Details, and Certification Path.
4. Select the Details tab and click the Copy to Files button.
5. Follow the wizard to save the certificate to a local file.
Use the default format: DER encoded binary X.509 (.CER).
6. Right-click the .CER file, and select Install Certificate.
7. Select Trusted Root Certificate Authorities and click OK.

Note: Do not let the wizard select the store for you.

A Security Warning dialog may appear. If it does, disregard this dialog by clicking the Yes button to
install the certificate.
8. Restart the browser and connect to the server.
9. Open the URL authenticated by the certificate.
If error messages do not appear, the certificate was successfully imported.

© 2018 General Electric Company. 37

 Installing Historian

Historian Installation
Historian provides a single install program on a DVD or ISO with options that install each system component.
The following table provides the information about installation locations of various Historian components
regarding their Root File Path and Root Registry Path from Historian 7.0 SP6 onwards.

Component File path Registry path

Server <DRIVE>:\Program HKEY_LOCAL_MACHINE\SOFTWARE\Intellution,
Files\Proficy\Proficy Inc.\iHistorian\Services
Historian\x64\Server
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\
Collectors – 32 bit <DRIVE>:\Program Files
GE Digital\iHistorian\Services\< COLLECTOR
(x86)\GE Digital\< COLLECTOR
NAME>
NAME>

Collectors – 64 bit <DRIVE>:\Program Files\GE HKEY_LOCAL_MACHINE\SOFTWARE\GE

Digital\< COLLECTOR NAME> Digital\iHistorian\Services\< COLLECTOR
NAME>
OPC DA, OPC AE, iFix, iFix <DRIVE>:\Program Files HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\
AE Collectors – 32 bit (x86)\GE Digital\<COLLECTOR Intellution, Inc.\iHistorian\Services\<
NAME> COLLECTOR NAME>
Client Tools <DRIVE>:\Program <None>
Files\Proficy\Proficy
Historian\x86\<CLIENT TOOL
NAME>
Alarm Archiver <DRIVE>:\Program HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\
Files\Proficy\Proficy Intellution,
Historian\x86\Server Inc.\iHistorian\Services\AlarmArchiver
Help C:\Program <None>
Files\Proficy\Proficy
Historian\ProficyDoc

Historian Startup Procedure Overview

This topic contains general instructions about how to install and start up Historian:

1. Design your system architecture.

Decide what collectors to install on which nodes, what computers to designate as the Historian Server
and the Historian Administrators, whether or not they will be web-based, and how much memory and
disk space you can assign to buffers and archives. Record the computer names of each node.
2. Ensure that data sources are installed.
3. Set up your Historian environment.
Refer to Setting Up the Historian Environment on page 22.

38 © 2018 General Electric Company.

 .
4. At the server node, insert the Historian DVD and select Install Historian.
Follow the prompts for the installation process, selecting either Single Server or Historian Mirror for
installation.
5. Activate your product using the latest Licensing Software at http://digitalsupport.ge.com.

Note: To add a component, re-run the install and select that component. Do not deselect previously
installed components as they will be uninstalled.

6. Once you have installed Historian, re-run the installation to install collectors where needed.
• iFIX Collector – Select the Historian iFIX Collector to collect data and the iFIX AE Collector to collect
alarms and events. When prompted, type in the name of the Historian server as the destination for
archived data.
• OPC Alarms & Events Collector – To collect data from an OPC AE server, select the OPC AE collector
and when prompted select the name of the OPC AE server.
• OPC Data Collector – To collect data from an OPC v1.0 or v2.0 server, select the OPC Data collector
and when prompted, select the OPC data collector from the list provided.
• Calculation Collector – To install a calculation collector, select it from the list of options and when
prompted, type in the name of the Historian server as the destination for the calculated values.
• Server-to-Server Collector – Select the Server-to-Server collector to collect data from one Historian
server (”r;Source”) and store it on another (”r;Destination”). When prompted, type in the name of both
the source and destination Historians.
• Server-to-Server Distributor – Select the Server-to-Server Distributor to configure tags at the source
archiver and send the tags to a destination archiver. When prompted, type in the name of both the
source and destination Historians.
• OSI PI Collector – Select the OSI PI Collector to collect data from an OSI PI node and store it in the
Historian. Select the OSI PI Distributor to collect data from the Historian server and store it on an OSI
PI node. When prompted, type in the name of the OSI PI and Historian servers.
• Simulation Collector - To install, select the Simulation collector from the list of options and when
prompted, type in the name of the Historian server as the destination for the Simulation values.
• File Collector - To install, select the File collector from the list of options and when prompted, type
in the name of the Historian server as the destination for importing CSV and XML text files into
Historian.
• Windows Performance Collector: To install, select the Windows Performance collector from the list
of options and when prompted, type in the name of the Historian server as the destination for collecting
the Windows performance counter data.
• OPC UA DA Collector: To collect data from any OPC UA 1.0-compliant OPC UA Server, select the OPC
UA DA collector and when prompted, type in the name of the OPC UA and Historian servers.
• Cygnet Collector: Select the Cygnet Collector to collect data from the Cygnet Server node and store
it in the Historian. When prompted, type in the Cygnet Site details and the destination Historian. The
CygNet ODBC Driver (Client tools) is prerequisite for the CygNet Collector installation, however, be
aware that the CygNet ODBC Driver does not ship with Historian.
• Wonderware Collector – Select the Wonderware collector to collect data from the Wonderware
node and store it in the Historian. When prompted, type in the name of the Wonderware source,
username, password and the destination Historian.
• OPC HDA Collector – Select the OPC HDA collector to collect data from any OPC HDA 1.2 - compliant
OPC HDA Server. When prompted select the OPC HDA server and type in the name of the destination
Historian server.

7. Restart your computer if prompted to do so.

© 2018 General Electric Company. 39

 If your collector services are not configured for automatic start up, manually start them.
8. For the Windows-based Historian Administrator clients, start the Administrator from the Historian
Startup Group.
When the Historian Administrator's main screen appears, you are ready to set up archives, collectors,
and tags in the Data Store Maintenance, Collector Maintenance, and Tag Maintenance screens.
Refer to the Using the Historian Administrator manual for details.

Note: Collectors will appear in the Historian Administrator only when they are started.

Historian Installation Limitations

• With a Historian install, you are limited to the Historian Administrator, Historian Web Admin Console,
and the Historian Trend Client. If you want to install other clients, use a client-specific install.
• You cannot close your current archive with a Historian Mirror Primary Server and Historian Mirror Node
installation. This is because closing the current archive introduces archive synchronization risks in a
mirrored environment. The restriction is enforced on all Historians, even those not using mirroring.

• You cannot use size-based archives with a Historian Mirror Primary Server and Historian Mirror Node
installation. This is because having archives of different sizes introduces archive synchronization risks
in a mirrored environment. The restriction is enforced on all Historians, even those not using mirroring.

Installing a Single Server Historian

If you are changing the role of a Historian Server that was previously a Mirror Node in any other configuration
(Single Server or Mirror Primary Server), you must uninstall Historian first. See Uninstalling Historian on page
90.

Important: The number of alarms in the Historian Alarm and Events database, and the frequency of
new events being added during the installation affects how long the install takes to complete. For
example, an install for a system with 1.5 million alarms can take up to three hours to complete.

To install a single server Historian:

1. Log in to the Windows Server as an administrator.

2. Start the Historian installation by double-clicking the InstallLauncher.exe file.
This file is found on your ISO or DVD.
3. Click the Install Historian link to start the Historian installation.
The Historian Welcome splash screen appears.
4. Click Next.
The End User License Agreement appears.
5. Read the license agreement and check Accept.
6. Click Next.
The Where do you want to install Historian? prompt appears.
7. To install on the default disk C:\, click Next.

40 © 2018 General Electric Company.

 The Override the default Historian data path screen appears.
8. Click Next to use the default path.
The default Historian Data Path is C:\Proficy Historian Data.
9. On the Choose the type of install you want to perform screen, select Historian Single Server and click
Next.

The Choose a Password for Built-in Admin account screen appears.

10. Enter the Admin Password and the re-enter the password in the second field to confirm, and then click
Next.

Note: The Password must be at least 6 characters, contain at least 2 numeric characters (0-9), and
at least 3 alphabetic characters (a-z, A-Z).

The LDAP server as the identity provider screen appears.

11. Select No (default) and click Next.
The Ready to Install screen appears.
12. Click Install.
The Installing progress bar appears and the installation proceeds. During the install, a Historian screen
briefly appears, and then the InstallShield wizard appears. A progress bar appears while the software is
prepared for installation and configuration. The installation process may take some time.

Note: If you are upgrading from either Historian 6.0 Enterprise or previous releases of Historian 7.0
including any of the service packs, this installation option will remove both Client Manager and
Configuration Manager. This will have no impact on your data or use of Historian unless you intend
to run a mirrored system. You will be prompted by the system and asked if you want to continue
with the install. Choosing Yes will remove Client Manager and Configuration Manager and install a
single server architecture. Choosing No will terminate the installation program.

The Installing Proficy Common Licensing screen appears. A progress bar appears while the license is
installed. This may take several minutes.

© 2018 General Electric Company. 41

 The Historian Installing screen with the progress meter reappears. The Historian Trend Client and
Historian Web Admin icons appear on the desktop, as well as the Historian SDK Help and Historian
Electronic Book help icons.
13. Click Exit when the Installation Successful screen appears.
The Reboot Required dialog appears.
14. Click Yes to restart your computer.
This may take several minutes.

Installing Historian Single Server Using Command Line

You can make a silent\passive installation of a Historian Single Server using the command line:

1. Open the command-line tool and locate install.exe in the Historian folder on your install disk.
2. Run install.exe using flags and arguments, as described in Install Command-Line Syntax.

install.exe [-q] [-quiet] [-s] [-silent] [-passive]

HistorianCmd=StandAlone HistAdministratorPassword=Gei321itc

Single Server Historian Architecture

This diagram shows the components of a single-server Historian system.

42 © 2018 General Electric Company.

 About Historian Log Files
Log files are created after you start historian for the first time. When you start collection, the Historian server
creates an archive. It places archive files in the Archives folder specified during installation. By default, this
is C:\Historian Data\Archives on Windows operating systems. All files with the .IHA extension
are Archive data files. The file with the .IHC extension contains configuration information.
The Archiver and collectors place log files in the Logfiles folder. By default, this is C:\Historian
Data\LogFiles on Windows operating systems. The Archiver produces two log files, a DATA
ARCHIVER-XX.LOG file and a DATA ARCHIVER.SHW file. Each collector also produces two log files. For
example, the Simulation Collector produces these files: SimulationCollector-01.log and
SimulationCollector.shw.
You can view log files using Notepad or any other text editor. The .LOG file shows events, warnings, and
errors produced by the Archiver during operation; the .SHW file shows current configuration information
that applies to the Historian Server.

© 2018 General Electric Company. 43

 Installing Historian using the Command Line
You can install Historian using the command line. The command-line install functionality allows you to
generate an output template/answer file. This file contains all the necessary properties for an installation.
The generated file can then be consumed as an input file for further installations requiring the same properties.
(The input file consumed should never be generated from scratch.) Input template/answer files can be used
in conjunction with silent or passive install flags.
For example, if you want to produce a template/answer file for a Historian Server installation with specific
options, you can do the following:
• Invoke the installer, specifying that an output template be generated.
• Go through the installer UI, selecting all your desired options, up until the last screen before installation
(the screen that reads “You are ready to install”.). At this point, the template/answer file is generated,
whether you proceed with the software install or not.
• Use the generated file as an input template/answer file for another Historian Server installation where
you want to use the same specified options.
To run the installer from the command line:

1. Open the command-line tool and locate install.exe in the Historian folder on your install disk.
2. Run install.exe using flags and arguments, as described in Install Command-Line Syntax on page
44.

install.exe <argument>=<value> [-q] [-quiet] [-s] [-silent] [-passive]

HistorianCmd=StandAlone HistAdministratorPassword=Gei321itc

Install Command-Line Syntax

Command-line Syntax

install.exe <argument>=<value> [-q] [-quiet] [-s] [-silent] [-passive]

Arguments

Argument Description
RootDrive The drive letter where the Historian Server binary files will be installed.
DataPath The disk path where the Historian data files will be stored.
HistAdministrator The password for the built-in admin account.
Password
AutoMethod This can be either LDAP or UAA.
LdapServerUrl ldap://{LDAP Server hostname or IP address}:389
Ldap_Authentica The LDAP Authentication Method is only SearchAndBind enabled.
tionMethod

44 © 2018 General Electric Company.

 Argument Description
LdapSearchBindSer The password for the LDAP Search And Bind account being used.
viceAccountPass
word
LdapSearchBindSer The LDAP Search And Bind Distinguished Name.
viceAccountDn
LdapSearchBind The LDAP Search And Bind Search Base.
SearchBase
LdapSearchBind The LDAP Search And Bind Search Filter.
SearchFilter
LdapGroups_Histori The Distinguished Names of LDAP groups members of which will have histo
anVizAdmin rian_visualization.admin scope.
LdapGroups_Histori The Distinguished Names of LDAP groups wgise members will have histori
anVizUser an_visualization.user scope.
LdapGroups_Histori The Distinguished Names of LDAP groups whose members will have histo
anRestApiRead rian_rest_api.read scope.
LdapGroupSearch Defines the part of the directory tree under which group searches should be
Base performed.

LdapGroupSearchFil An LDAP Groups Search Filter, which defines the matching criterion for group
ter membership search for user. Use {0} to denote user name.

LdapGroup An LDAP Groups Maximum Search Depth, which determines how many levels
MaxSearchDepth deep the UAA searches for nested groups to determine user’s group membership.

LdapGroupSearchSub The LDAP Groups Search Subtree flag, which determines whether UAA searches
tree the sub-tree of the LDAP base.

LdapMailAttribute The LDAP attribute that contains a user’s primary email address. The default is
Name mail.

Output Template Flags and Arguments

The /t flag directs the install to generate a template/answer file. This is a human-readable XML file with
the desired configuration options. It is populated with user information. The file is always placed in the temp
directory, defined by the %temp% environment variable.
The TemplateOutputDirectory argument is optional. If it is used, then the file is also deposited at the
specified location, in addition to the temp directory.
The template file is named template_Historian.xml.
Syntax:

/t TemplateOutputDirectory=<template-output-file-location>

Input Template Flags and Arguments

The /c flag directs the install to consume a template/answer file at the specified location. This is a
human-readable XML file with the desired configuration options. It is populated with user information.

© 2018 General Electric Company. 45

 Command-line parameters always supersede or override template-provided parameters.
Syntax:

/c TemplateInputFile=<template-input-file-location>

Silent and Passive Flags

-q, -quiet, -s, -silent

Using either of these flags directs the install to progress silently, with no UI whatsoever.

-passive

This flag directs the install to show progress via the UI and then disappear upon install completion, regardless
of whether the install has succeeded or failed.

Install Command Examples

Install Historian with an LDAP Authentication Configuration

This example shows how to install Historian with an LDAP Authentication configuration:

Install.exe -s HistAdministratorPassword=HistAdmin AuthMethod=LDAP

LdapServerUrl=ldap://3.4.5.6:389
LdapSearchBindServiceAccountPassword=ldapPass
Ldap_AuthenticationMethod=SearchAndBind
LdapSearchBindServiceAccountDn="CN=AdminUser,CN=Users,DN=ge,DN=com"
LdapSearchBindSearchBase="DC=test,DC=ge,DC=com"
LdapSearchBindSearchFilter="CN={0}"
historian_dbpwd=GE
LdapGroups_HistorianVizAdmin="CN=testuser1,CN=Users,DN=ge,DN=com"
LdapGroups_HistorianVizUser="CN=testuser2,CN=Users,DN=ge,DN=com"
LdapGroups_HistorianRestApiRead="CN=testuser3,CN=Users,DN=ge,DN=com"
LdapGroupSearchBase="DC=test,DC=ge,DC=com"
LdapGroupSearchFilter="member={0}"
LdapGroupMaxSearchDepth="1"
LdapGroupSearchSubtree="true"

Generate a Template File

This example shows how to generate a template file:

Install.exe /t TemplateOutputDirectory="C:\Users\User1\Desktop"
HistAdministratorPassword=HistAdmin
AuthMethod=LDAP
LdapServerUrl=ldap://3.4.5.6:389
LdapSearchBindServiceAccountPassword=ldapPass
Ldap_AuthenticationMethod=SearchAndBind
LdapSearchBindServiceAccountDn="CN=AdminUser,CN=Users,DN=ge,DN=com"
LdapSearchBindSearchBase="DC=test,DC=ge,DC=com"
LdapSearchBindSearchFilter="CN={0}"
historian_dbpwd=GE
LdapGroups_HistorianVizAdmin="CN=testuser1,CN=Users,DN=ge,DN=com"
LdapGroups_HistorianVizUser="CN=testuser2,CN=Users,DN=ge,DN=com"
LdapGroups_HistorianRestApiRead="CN=testuser3,CN=Users,DN=ge,DN=com"

46 © 2018 General Electric Company.

 LdapGroupSearchBase="DC=test,DC=ge,DC=com"
LdapGroupSearchFilter="member={0}"
LdapGroupMaxSearchDepth="1"
LdapGroupSearchSubtree="true"

Install with a Generated Template File

The example shows how to install Historian using a generated template file:

Install.exe /c
TemplateInputFile="C:\Users\User1\Desktop\template_Historian.xml"

Installing Historian in a Mirrored Environment

1. See Installing Historian Mirror Primary Server on page 47.
2. See Installing Historian Mirror Node on page 49 or Installing Historian Mirror Node using the Command
Line on page 51.

Installing Historian Mirror Primary Server

To install Historian in a mirrored environment, first install the primary server:

1. Log in to the Windows Server as an administrator.

2. Start the Historian installation by double-clicking the InstallLauncher.exe file.
This file is found on your ISO or DVD.
3. Click the Install Historian link to start the Historian installation.
The Historian Welcome splash screen appears.
4. Click Next.
The End User License Agreement appears.
5. Read the license agreement and check Accept.
6. Click Next.
The Where do you want to install Historian? prompt appears.

© 2018 General Electric Company. 47

 7. To install on the default disk C:\, click Next.
The Override the default Historian data path screen appears.
8. Click Next to use the default path.
The default Historian Data Path is C:\Proficy Historian Data.
9. On the Choose the type of install you want to perform screen, select Historian Mirror Primary Server
and click Next.
The Choose a Password for Built-in Admin account screen appears.
10. Enter the Admin Password and the re-enter the password in the second field to confirm, and then click
Next.

Note: The Password must be at least 6 characters, contain at least 2 numeric characters (0-9), and
at least 3 alphabetic characters (a-z, A-Z).

The LDAP server as the identity provider screen appears.

11. Select No (default) and click Next.
The Ready to Install screen appears.
12. Click Install.
The Installing progress bar appears and the installation proceeds. During the install, a Historian screen
briefly appears, and then the InstallShield wizard appears. A progress bar appears while the software is
prepared for installation and configuration. The installation process may take some time.
The Installing Proficy Common Licensing screen appears. A progress bar appears while the license is
installed. This may take several minutes.
The Historian Installing screen with the progress meter reappears. The Historian Trend Client and
Historian Web Admin icons appear on the desktop, as well as the Historian SDK Help and Historian
Electronic Book help icons.
13. Click Exit when the Installation Successful screen appears.
The Reboot Required dialog appears.

48 © 2018 General Electric Company.

 14. Click Yes to restart your computer.
This may take several minutes.

Installing Historian Mirror Primary Server Using the Command Line

: You can make a silent\passive installation of a Historian Primary Mirror Server using the command line.

1. Open the command-line tool and locate install.exe in the Historian folder on your install disk.
2. Run install.exe using flags and arguments, as described in Install Command-Line Syntax.

install.exe [-q] [-quiet] [-s] [-silent] [-passive]

HistorianCmd=HistorianCore HistAdministratorPassword=Gei321itc

Installing Historian Mirror Node

See Installing Historian Mirror Primary Server on page 47.
Install your Historian Mirror Primary Server before you install the Mirror node.
• After installing your Mirror, the Mirror node will not have a Configuration Manager or the Embedded Web
Services. These are only included on the Primary node and are shared by Mirror nodes.
• The configuration setting of the mirror node should be the same as the primary node. This includes
activating the same License Key on the mirror node as the primary node.
• Primary and secondary nodes should be in a domain. This setup will not work on the work group.
• Historian Global Security (strict client and collector authentication) should be disabled.
• If the primary node is down, new tags cannot be added using the secondary node because the
Configuration Manager is down.
• Ensure that the mirror node has the same drive name as that of the primary node for the archive files,
buffer files, and the log files.
For more information on how to configure a mirror node, refer to the web-based Historian Administrator
Console e-book.
To install the Historian Mirror node:

1. Log in to the Windows Server as an administrator.

2. Start the Historian installation by double-clicking the InstallLauncher.exe file.
This file is found on your ISO or DVD.
3. Click the Install Historian link to start the Historian installation.
The Historian Welcome splash screen appears.
4. Click Next.
The End User License Agreement appears.
5. Read the license agreement and check Accept.
6. Click Next.
The Where do you want to install Historian? prompt appears.

© 2018 General Electric Company. 49

 7. To install on the default disk C:\, click Next.
The Override the default Historian data path screen appears.
8. Click Next to use the default path.
The default Historian Data Path is C:\Proficy Historian Data.
9. On the Choose the type of install you want to perform screen, select Historian Mirror Node and click
Next.
The Choose a Password for Built-in Admin account screen appears.
10. Enter the Admin Password and the re-enter the password in the second field to confirm, and then click
Next.

Note: The Password must be at least 6 characters, contain at least 2 numeric characters (0-9), and
at least 3 alphabetic characters (a-z, A-Z).

The LDAP server as the identity provider screen appears.

11. Select No (default) and click Next.
The Ready to Install screen appears.
12. Click Install.
The Installing progress bar appears and the installation proceeds. During the install, a Historian screen
briefly appears, and then the InstallShield wizard appears. A progress bar appears while the software is
prepared for installation and configuration. The installation process may take some time.
The Installing Proficy Common Licensing screen appears. A progress bar appears while the license is
installed. This may take several minutes.
The Historian Installing screen with the progress meter reappears. The Historian Trend Client and
Historian Web Admin icons appear on the desktop, as well as the Historian SDK Help and Historian
Electronic Book help icons.
13. Click Exit when the Installation Successful screen appears.
The Reboot Required dialog appears.

50 © 2018 General Electric Company.

 14. Click Yes to restart your computer.
This may take several minutes.

Installing Historian Mirror Node using the Command Line

You can install a Historian Mirror node using the command line. This allows you to install silently or passively.
To run the installer from the command line:

1. Open the command-line tool and locate install.exe in the Historian folder on your install disk.
2. Run install.exe using flags and arguments, as described in Install Command-Line Syntax on page
44.

install.exe [-q] [-quiet] [-s] [-silent] [-passive] HistorianCmd=mirror

Archive Duration Property Change in a Mirrored Environment

When the Archive Duration property is changed in a mirrored environment, the changes will take effect
after a time gap of 15 minutes.

Mirroring FAQs
• What happens when a node that was down comes back? Does the data written to one get synched to
the other?
There is no automatic synching. If a node is down, the information to be written is buffered by the Client
Manager, or if the Client Manager is down, it is buffered by the collector. When the node comes back,
data is written to the data archiver.
• There is only one Configuration Manager on the primary node. Can I still do configurations if the primary
node goes down?
No. If the Configuration Manager is not available, you can read configurations, as the collectors know
about the tag information, but you cannot edit or modify configurations.
• Is the Configuration Manager a single point of failure?
Yes. If the primary node goes down, you cannot edit configurations but, since information about the
configuration is stored in the registry of each client, the information is still available for reads and writes
in the event of a primary node failure.
• What happens if one mirror crashes in the middle of a read/write request?
This operation continues to function in the same way as in prior releases. The Client Manager holds a
copy of the message request; once the node comes back, the write operation resumes. Any read request
that is sent will fail if the node goes down during the read.
• The server where my primary node is installed is down. What is the expected behavior?
The Web Admin and Web Trend Tool will not be available; you can look up tag configuration on the
Historian Administrator (Windows), but you will not be able to edit tag configuration information. All other
existing clients should continue to work as expected, with the ability to collect and store data, search
for tags, trend and report on tag information. A new user connection with default Historian server set
to primary must connect to the primary node to get information about all the mirrors before it gains the
ability to automatically failover to mirror when the primary node is down.
• The Client Manager on the primary node is down, but the server is running. What is the expected behavior?

© 2018 General Electric Company. 51

 The Web Admin and the Web Trend Tool along with all other existing clients will work as expected with
the ability to do configuration changes, collect and store data, search for tags, trend and report on tag
information. A new user connection with default Historian server set to primary must connect to the
primary node to get information about all the mirrors before it gains the ability to automatically failover
to mirror when the primary node is down. .
• One of the data archivers is down, but at least one is active. What is the expected behavior?
The system should continue to function as designed. The Web Admin, Web Trend Tool, and Historian
Administrator (Windows), as well as other clients should continue to work as expected, with the ability
to collect and store data, search for tags, trend and report on tag information.
• If there are calculated tags on a multi-node system, are the calculations done on all nodes?
Yes.
• Are Historian tag stats created independently? Can they be different between different nodes?
Yes. These are queries, not tags, to a specific Data Archiver. As writes are independent, one Data Archiver
may be ahead of another, so the stats may vary slightly.
• How do we ensure that the data is consistent across data archivers?
Tag information is consistent; there is only one tag. The time stamp and value are sent to all mirrors.
• Are there specific log files that I should be looking for to help diagnose issues with mirror failure modes?
No changes were made to the logs for data archiver; however, there are new log files for Client Manager
and Config Manager.
• There are now two *.ihc files: *config.ihc and *CentralConfig.ihc. What is the difference
between the two?
*CentralConfig.ihc is the overall master config used by the Configuration Manager. The
*config.ihc is used by the Data Archiver and is generated from *CentralConfig.ihc. This was
done to maintain consistency between Historian versions. To maintain configurations between versions
or Historians, refer to Reusing an archive configuration file in the Historian eBooks.
• With mirroring, is Microsoft Cluster Server still supported? What is the recommended approach?
Mirroring is offered as a Microsoft Cluster Server replacement as an HA offering for Enterprise Historian.
Running in MCS has not been tested nor validated to date with mirrored Historian systems.
• Must SQL Server be installed in a system with mirrors?
No. SQL Server is only required for AEDB.
• How does mirroring work with SQL AE logging?
There is still an alarm archiver; it doesn't go through the Client Manager, so it talks to SQL as before.
• How does AE fit with their synching?
There is one database, so everyone talks to the same SQL database. You can cluster the database, but
that is separate from mirroring.
• How does mirroring work in a workgroup environment or non-domain?
Mirroring is not supported in Workgroups.
• Are there any issues when making changes in the Historian Administrator and a mirrored system?
You must establish a mirror using the Historian Web Admin Console, but compatibility with all APIs has
been maintained. Therefore, you can make tag changes in either the Web Admin or the VB Windows
Admin, and those changes will show up in both Admins.
• Are there any plans to add more than three mirrors?

52 © 2018 General Electric Company.

 No performance benefits have been seen beyond three mirrors.
• Do redundant collectors behave differently in mirrors?
No, there should not be any difference in behavior.
• Are there any conflicts when using Port 14000 for Historian to Historian communications? For example,
Site to Corporate?
No. Client Manager is now on Port 14000, Data Archiver is on Port 14001, and the Configuration Manager
is on Port 14002.
• If load balancing uses round robin reads, does the cache need to be loaded separately on both machines,
and will it decrease performance?
It does require more memory. The Client Manager makes the decision on where to send the messages,
and it knows about configuration. There is some overhead, but it is overcome by having multiple data
archivers to service multiple requests. That is why there is a 1.5X improvement with two mirrors, instead
of 2X.
• Are there any additional considerations if Mirroring is being used with other GE apps like Workflow or
Plant Apps?
No, it still looks like one Historian to other outside systems.
• Is the store and forward feature also used in mirroring?
Yes. This is a feature of the Collector and is independent of mirroring. Once the message is given to the
Client Manager, it is done. If the Client Manager can't reach one of the Data Archivers, it buffers the
request until the Archiver is available.
• In a mirrored environment, do existing queries and reports work the same?
Yes. Everything works the same as it did before. It sees it as a single Historian and communicates over
the same ports through the same API.
• Does the Historian OPC HDA server still work in a mirrored environment?
Yes.
• If data is being written to two Data Archivers, does this double the traffic from the collector?
No. It does not double traffic from the collector; it sends a single message to the Client Manager. The
traffic is doubled between the Client Manager and the two Data Archivers.

Installing Historian with LDAP Integration

Before installing Historian with LDAP integration, make sure you have an LDAP server set up. For Historian,
this is a Windows domain controller or an Active Directory server.
On your domain (or Active Directory), create users and groups as usual. In order for Historian’s User
Authentication and Authorization server to log users in, you also need to identify an attribute in your LDAP
schema that can be used as the user name in Historian. This attribute needs to be able to uniquely identify
each user. In addition, as Historian user names cannot contain space, values of this attribute should not
contain space either. Typically, sAMAccountName or userPrincipalName meet these conditions in an
LDAP directory backed by Windows Active Directory. By default, the sAMAccountName is used in the
Search Filter, but this can be modified during your Historian installation.

1. Log in to the Windows Server as an administrator.

2. Start the Historian installation by double-clicking the InstallLauncher.exe file.

© 2018 General Electric Company. 53

 This file is found on your ISO or DVD.
3. Click the Install Historian link to start the Historian installation.
The Historian Welcome splash screen appears.
4. Click Next.
The End User License Agreement appears.
5. Read the license agreement and check Accept.
6. Click Next.
The Where do you want to install Historian? prompt appears.
7. To install on the default disk C:\, click Next.
The Override the default Historian data path screen appears.
8. Click Next to use the default path.
The default Historian Data Path is C:\Proficy Historian Data.
9. On the Choose the type of install you want to perform screen, select Single Server and click Next.
The Choose a Password for Built-in Admin account screen appears.
10. Enter the Admin Password and the re-enter the password in the second field to confirm, and then click
Next.

Note: The Password must be at least 6 characters, contain at least 2 numeric characters (0-9), and
at least 3 alphabetic characters (a-z, A-Z).

The LDAP server as the identity provider screen appears.

11. Select Yes and click Next.
The Provide the URL for the LDAP server screen appears.
12. Type the URL in the LDAP Server URL text box
The URL should begin with ldap:// or ldaps://.

Note: Be sure to append the port number (configured for your LDAP protocol) to the IP address (for
example, ldap://192.168.0.1:389).

13. Click Next.

The Please enter details for search and bind authentication screen appears.

54 © 2018 General Electric Company.

 “Search and Bind” means to search for users with a filter, typically "sAMAccountName={0}" for
Windows Active Directory. Note that the default value for Search Filter is set to "sAMAccountName={0}"
and "Mail Attribute Name" defaults to "mail", which you can leave as is. As an alternative to
sAMAccountName, you may choose to use userPrincipalName instead.
14. Type the appropriate entries in the Service Account DN, Service Account Password, Confirm Password,
and Search Base text fields, and click Next.
The Specify Distinguished Names of LDAP Groups mapped to each UAA scope screen appears.

© 2018 General Electric Company. 55

 In this screen, you configure how LDAP groups are mapped to three UAA scopes that you create. You
can use tools such as ADExplorer from Microsoft to find out the full DN of a group. You can assign a
scope to multiple LDAP groups; enter them together, separately by semicolon, in the field corresponding
to the scope. If you leave any of them blank, it means that you are not associating any LDAP groups to
the corresponding scope.
15. Type the appropriate entries in the historian_visualization.admin, historian_visualization.user, and
historian_rest_api.read scope fields and click Next.
The Specify how searches for users' LDAP group membership should be conducted screen appears.

56 © 2018 General Electric Company.

 This screen determines how a LDAP user account's LDAP group membership is determined. In the example
shown in the screen, you are finding groups with the member attribute, which contains the user's common
name. If Max Search Depth is set to 1, there is no search for nested groups. If Max Search Depth is set
to a value greater than 1, then searching in nested groups is enabled.

Note: Use semicolons to separate DNs. If you leave any of them blank, then you are not associating
any LDAP groups to the corresponding scope.

16. Type the appropriate entries in the Search Base, Search Filter, and Max Search Depth text fields, and
make sure the Search Subtree box is checked, and click Next.
The Ready to Install screen appears.
17. Click Install.
The Installing progress bar appears and the installation proceeds. During the install, a Historian screen
briefly appears, and then the InstallShield wizard appears. A progress bar appears while the software is
prepared for installation and configuration. The installation process may take some time.

Note: If you are upgrading from either Historian 6.0 Enterprise or previous releases of Historian 7.0
including any of the service packs, this installation option will remove both Client Manager and
Configuration Manager. This will have no impact on your data or use of Historian unless you intend
to run a mirrored system. You will be prompted by the system and asked if you want to continue
with the install. Choosing Yes will remove Client Manager and Configuration Manager and install a
single server architecture. Choosing No will terminate the installation program.

The Installing Proficy Common Licensing screen appears. A progress bar appears while the license is
installed. This may take several minutes.

© 2018 General Electric Company. 57

 The Historian Installing screen with the progress meter reappears. The Historian Trend Client and
Historian Web Admin icons appear on the desktop, as well as the Historian SDK Help and Historian
Electronic Book help icons.
18. Click Exit when the Installation Successful screen appears.
The Reboot Required dialog appears.
19. Click Yes to restart your computer.
This may take several minutes.

Configuring Historian to use LDAP via SSL

When you log into either the Web Trend Client or Web Admin of Historian 7.0, a username and password
are entered and need to be validated by the LDAP server. Historian needs to send the username and password
entered on the login page to the LDAP server. This must be done securely by encrypting those credentials
and sending to the intended LDAP server.
The following two methods configure the UAA server to communicate via LDAPs (LDAP via SSL). In both
methods, after the install you must manually change the UAA.yml file to complete the configuration.

Important: Do not change any other aspects of this file unless instructed by GE. Unauthorized
modifications may impact the operation of your software and violate the terms of your GE Support
Agreement.

The following methods assume:

• You have an LDAP server that is listening for LDAPs communications.
• You entered the URL to reach the server.
The UAA server, like any LDAPs client, gets a certificate when it connects to an LDAP server via SSL. The
following two configuration methods differ in what happens at that point.
Although you know the URL that you used to reach the server, to prove you are connected to the intended
server, compare the certificate received against the expected certificate. Each LDAP server has a unique
certificate containing its name and public key.

Method 1: Add the Certificate to the UAA Server Keystore and Refer to It
This method is the most secure because it gives both encryption of network traffic and the highest assurance
of communicating with the LDAP server you desire.
You store the expected server certificate in a password protected binary keystore file. The ability to change
the keystore is password protected. This prevents someone from modifying the expected server certificate
to match a malicious imposter LDAPs server.

1. Export the server certificate in DER format. The exact steps differ depending on what LDAP server you
are using.
For the Active directory, use the Certificates Snap In. In this example, assume you exported to
ldaps-public-der.cer
2. Import the certificate into the keystore file used by the UAA server:
a) At the command prompt, change the directory to the location of the keystore file. Typically, this is:

c:\Program files\GE Digital\Historian Embedded Web Server\conf

58 © 2018 General Electric Company.

 • When prompted for a password, enter the word password.
• When asked, Do you want to trust this certificate? press y (to enter yes).

b) Locate the keytool.exe file on the machine with the Historian Embedded Tomcat Container
service. Use that full path name in this command line:

C:\Program Files\Java\%JAVA_HOME%\bin\keytool.exe" -import -alias

ldaps -file ldaps-public-der.cer -keystore keystore

c) When prompted for a password, enter the word password.

d) When asked Do you want to trust this certificate?, type the letter y (to enter yes).
3. Configure the UAA.YML file (typically found in C:\Program Files\GE Digital\UAA) to refer to
that certificate by the alias name you gave during import.
The following example, uses ldaps:

ldap:
ssl:
skipverification: false
sslCertificateAlias: ldaps

4. Restart the Historian Embedded Tomcat Container service and try logging into the Trend client

Method 2: Skip Certificate Verification (less secure)

If you do not have access to the certificate for the LDAP server, this method still provides you with encrypted
communications. You must ensure that you are communicating with the intended LDAP server, which you
provided in your URL. If that gets maliciously redirected, then you could be talking to a different server.

1. In the UAA.YML file (typically found in C:\Program Files\GE Digital\UAA), set the skipverification
to true as shown in the following example:

ldap:
ssl:
skipverification: true

2. Restart the Historian Embedded Tomcat Container service and log in to the Trend Client or Web Admin.

© 2018 General Electric Company. 59

 Installing Historian in a Cluster Environment

Installing Historian in a Cluster Environment

Historian works with the Microsoft Cluster Service Manager to ensure high availability of the Historian server.
If the primary Historian node in the cluster experiences difficulties, Historian is automatically started on
another node to take over. Server high availability is managed through the Microsoft Cluster Service Manager.
• Read the Important Product Information document and verify that all the prerequisites are properly
installed.
• Configure a failover cluster in Windows Server 2008 R2. For more information, refer to Configuring Clusters
section in the Using Historian Administrator ebook.
• To use Historian Alarms and Events in a cluster environment, select the appropriate SQL Server for both
the Cluster Nodes.

1. In Windows, go to All Programs > Administrative Tools > Failover Cluster Manager on any of the cluster
nodes and make it the primary node.
2. Install Historian on that node.
3. Change the Historian Data path to the Cluster Shared Disk.
4. Enter valid SQL Server details.
5. Complete the Historian installation.
6. After installing Historian on Cluster Node1, repeat steps from 1 to 5 for Node 2.

Configuring Historian Cluster Service on Windows Server 2008

Complete all of the following tasks to configure Historian Cluster Service.

Adding User-defined Resource Types to the Cluster Instance

If Failover Clustering is enabled on a machine, the Historian install will register two user-defined resource
types in the cluster.
To ensure that the user-defined resource types are added to the cluster instance:

1. In Windows, go to All Programs > Administrative Tools > Failover Cluster Manager.
2. Right click the cluster instance and select Properties:

60 © 2018 General Electric Company.

 3. If the Historian User defined resource types are not available, click the Add button.
Select [HistorianInstallDir]/x64/Server/Historian.dll as the resource DLL with
Historian and AlarmArchiver as both the resource type names and display names.

Adding Historian Service to the Cluster

1. In the Failover Cluster Manager, right-click the cluster instance, and choose More Actions > Create
Empty Service or Application..

© 2018 General Electric Company. 61

 2. Rename the newly created, empty service. For example: Historian.
3. Right-click the Historian empty service and choose Add a resource > More resources > 3 - Add
Historian.
4. Right-click the Historian empty service and choose Add a storage.
5. Create the IP address and network name that allow access to a clustered Historian instance regardless
of the actual node the Historian server resides on.
a) Right-click the Historian empty service and choose Add a resource > 1 - Client Access Point.
b) Enter the IP Address that will be used for clustered Historian.
6. Add Historian resource dependencies:
a) Right-click Properties on the New Historian resource in the Historian service summary list.
b) Click the Dependencies tab and add all three resources as dependencies to New Historian.

62 © 2018 General Electric Company.

 You can now bring the Historian service online.

Adding Alarm Archiver Resource to the Cluster

1. Right-click the Historian empty service and choose Add a resource > More resources > 1 - Add
Alarm Archiver.
2. Right-click Properties on the New Alarm Archiver resource in the Historian service summary list.
3. Click the Dependencies tab and add New Historian as a dependency.

It should now be possible to bring the Alarm Archiver service online.

Note: he Alarm Archiver resource does not require other dependencies like Cluster Disk and
IP Address.

© 2018 General Electric Company. 63

 Configuring Generic Services
To configure Client Manager, Configuration Manager, Diagnostic Manager, Historian Embedded PostgreSQL
Database, Historian Embedded Tomcat Container, and Historian Indexing Service, you must configure them
as Generic Services in the Failover cluster as shown below:

Begin with configuring the Client Manager Resource Dependency, and then repeat the steps for the
Configuration Manager, Diagnostic Manager, Historian Embedded PostgreSQL Database, Historian Embedded
Tomcat Container and Historian Indexing Service.

1. Right-click Properties on the Client Manager resource in the Historian service summary list.
2. Click the Dependencies tab and add the IP Address dependency:

3. Click Apply and click OK.

4. Right-click Properties on the Client Manager resource in the Historian service summary list.
5. Click the General tab and select the Use Network Name for Computer Name option:

64 © 2018 General Electric Company.

 6. Click OK.
7. Repeat the steps in this procedure for the Configuration Manager, Diagnostic Manager, Historian
Embedded PostgreSQL Database, Historian Embedded Tomcat Container and Historian Indexing Service.
You can now bring the Historian service online:

© 2018 General Electric Company. 65

66 © 2018 General Electric Company.
Installing Historian Components

Installing Historian Components

After you have installed the Historian server and restarted your system, you can install additional components,
such as Client Tools, Excel Add-in, Data Collectors, and Alarms and Events.
Unlike earlier versions of Historian, the Historian Administrator and HDA Server are now installed as part of
the Client Tools installation, which means you do not need to run a separate installation for each of those
components.

Installing Historian Client Tools

The Historian Client Tools installation installs the following components by default:
• Historian Client Tools
• Historian Administrator
• Historian Documentation and Help
• OLE DB Driver and Samples
• HDA Server
• User API and SDK
• Historian Client Access Assembly
• Collector Toolkit
The Historian Excel Add-in 64-bit component is not selected in the Client Tools – Select Features screen.

© 2018 General Electric Company. 67

 You can select the check box for the Excel Add-in to install it at the same time as the Historian Client Tools.
Otherwise, you can install it in a separate installation using the Install Historian screen.

Note: You can deselect the check boxes for all the components except the Historian Client Tools and
Historian Client Access Assembly. However, if you deselect any of the components to install them at
a later time, such as the Historian Administrator or HDA Server, when you re-run the installation,
make sure you select all of the previously installed components in addition to the ones that you are
installing, because any component that you do not select that was previously installed will be uninstalled
during the later installation.

1. Run the Historian install.

The Historian Splash screen appears.
If this screen does not appear, double-click the InstallLauncher.exe file on the ISO or DVD to
display it.
2. Click the Historian Client Tools link.
The Select Features screen appears with the check box for Historian Client Tools selected.
By default, the check boxes for Historian Administrator, HDA Server, Historian Documentation & Help,
OLE DB, and User API and SDK are also selected. If you do not want to install them at this time, deselect
the check box(es) before continuing with the installation process.
3. Select the Proficy Historian Client Tools check box and click Next.
The Historian Server Security screen appears.
4. Select All Users to give all local and domain users full access to the Historian server. Or, select Specific
User to add one user with full access to the Historian server.
5. Click Next.
The OPC Core Components screen appears briefly, and the installation proceeds.

68 © 2018 General Electric Company.

 6. Click Yes if you want to start the Historian services now, or click No if you want to apply software updates
(SIMS) before starting Data Archiver.
7. Select Yes, I want to restart my computer now, and click Finish.

Installing Historian Data Collectors

Use the Historian install media (.iso disk image file) to install data collectors. Consider the following
information as it may applicable to the collector you are installing.
• All collectors, except the iFIX and Machine Edition View collectors, can run as Windows services. If so
configured, they will continue to run after you log out, and can be configured to start automatically when
you start your computer.
• When upgrading a collector(s) from a prior installation, it is recommended that you first uninstall the
collector(s) using the media in which the collector(s) was installed, then proceed with the installation of
the collector(s) using the new install media.
• The OSI PI SDK is required for the OSI PI Collector installation; however, the OSI PI SDK does not ship with
Historian. If the OSI PI SDK is not installed, the OSI PI Collector will not start. If you install the OSI PI Collector
on a machine that does not contain your PI Server, be sure to install the OSI PI SDK on the machine with
the OSI PI Collector.
• If you install the Wonderware Collector on a machine that does not contain your Wonderware server,
be sure to install the ODBC Driver for SQL on the Wonderware Collector machine. If the ODBC Driver for
SQL is not installed, the Wonderware Collector cannot connect to the Wonderware server.
• If you plan to select Predix Cloud for your destination server and you are not using Historian Configuration,
see Offline Configuration for Collectors on page 74
• If you run the collector install and do not reboot the machine afterwards (as prompted), and then perform
a collector uninstall or another collector install, you will likely encounter a failed install or uninstall. To
avoid this issue, reboot the machine following the collector install.
Installing Data Collectors on Historian server/Predix cloud:

1. Launch the .iso disk image file and run InstallLauncher.exe.

The Install Historian splash screen appears.
2. Click Install Collectors.
The Welcome to Historian Collectors! screen appears.
3. Click Next.
The License Agreement screen appears.
4. Click Accept and click Next.
5. Select an installation drive letter and click Next.
6. Enter the Data Directory and click Next.
The Choose the Collector(s) to install screen appears.
7. Select the Collector(s) that you want to install.
You can select more than one collectors. In the next screens, the installation configuration is done for
each collector that you selected.
8. Click Next.
9. If you select Server-only collector(s), for example, File collector, specify the Destination Historian Server
name and click Next. You are ready for the install. Or, if you select collector(s) that can be installed on

© 2018 General Electric Company. 69

 both the Historian server or the Predix cloud, for example, OPC Collector, the wizard screens will guide
you through the install process.
10. Click Next, in the Source Server configuration screen, click Next.
11. Enter details only if you are configuring a remote OPC server. Click Next.
12. Depending on the destination of your collector installation, select Historian or Predix Cloud. Note that,
the subsequent screens will depend on what you select.
13. Follow the instructions on the configuration screens that appear to configure parameters for each
collector selected for installation.
When you are done, you may be prompted to start Historian services. If so, click Yes, or click No to apply
software updates before starting the Historian services.
14. Click Exit.
The Install Historian screen appears.
15. Click Exit.
You may be prompted to restart your computer to complete the installation. If so, click Yes to restart or
No to restart later. The collectors do not appear in the Historian Administrator until after the collectors
have been started.

Installing a Collector Silently using the Command Line

Several Historian collectors can be installed silently. A silent install is a method of installing the application
software and requires little or no user interaction. This method allows you to perform an unattended
installation as it is not necessary for you to direct the installation process. This command line install applies
to the following collectors:
• Server-to-Server
• OSI PI
• Wonderware
• File Collector
• iFix Collector
• Calculation Collector
• iFix Alarm and Event collector
• OSI Pi Distributor collector
• OSI S2S Distributor collector

Command-Line Syntax

Command
Collectors_Install.exe

Argument
-s, -silent
Using either of these flags directs the install to progress silently, with no user interaction.

Parameters
• <CollectorName>_AddLocal (1=install and 0= uninstall)
• <CollectorName>_sourceservername

70 © 2018 General Electric Company.

 • <CollectorName>_destinationservername

Note: destinationservername and cloud parameters do not apply to the File Collector, iFIX
Collector, or Calculation Collector.

For a Historian destination, use the machine name. For a Predix Cloud destination, use "Cloud".
• <CollectorName>_clientsecret
• <CollectorName>_clouddestaddress
• <CollectorName>_clouddestaddress
• <CollectorName>_configserver

Note: If using offline configuration, set this parameter equal to none. For example:

HistorianS2SCollector_configserver=none

• <CollectorName>_identityissuer
• <CollectorName>_clientid
• <CollectorName>_zoneid
• <CollectorName>_proxy
• <CollectorName>_datapointattributekey1
• <CollectorName>_datapointattributevalue1
• <CollectorName>_datapointattributekey2
• <CollectorName>_datapointattributevalue2
• <CollectorName>_datapointattributekey3
• <CollectorName>_datapointattributevalue3
• <CollectorName>_datapointattributekey4
• <CollectorName>_datapointattributevalue4
• <CollectorName>_datapointattributekey5
• <CollectorName>_datapointattributevalue5

Installing a Collector Silently

Note: Installing a collector can potentially remove a collector that is already installed. For example, if
you already installed the OSI PI Collector and then run the silent install for the Server 2 Server Collector,
the OSI PI Collector can be uninstalled. If you are installing a new collector on a machine where there
is an existing collector that you want to retain, you must use command line parameters for the existing
collector as well.

1. Navigate to the Collectors folder on the install media.

2. At a command prompt, enter:
Collectors_Install.exe -s
3. Add parameters as appropriate and assign the correct values to the parameters using the equal sign
(=).
Be sure to replace <CollectorName> with the name of your collector. For example, you might replace
<CollectorName> with HistorianS2SCollector:
HistorianS2SCollector_AddLocal=1

© 2018 General Electric Company. 71

 If the parameters are not assigned a value, then the default values are used.

1
This command installs the Historian Server 2 Server collector and sets the source server
to be PC1 and destination server to be PC2.

>Collectors_Install.exe -s HistorianS2SCollector_AddLocal=1
HistorianS2SCollector_sourceservername=PC1
HistorianS2SCollector_destinationservername=PC2

2
This command installs the Historian File Collector and sets the destination server name to
be PC1.

>Collectors_Install.exe -s HistorianFileCollector_AddLocal=1

HistorianFileCollector_destinationservername=PC1

3
This command installs the iFIX Collector and sets the destination server name to be PC1.

>Collectors_Install.exe -s HistorianiFIXCollector_AddLocal=1

HistorianFileCollector_destinationservername=PC1

This command installs the iFIX A&E Collector and sets the destination server name to be
PC2.

>Collectors_Install.exe -s HistorianiFixAECollector_AddLocal=1
HistorianiFixAECollector_destinationservername=PC2)

4
This command installs the OSI Pi Distributor collector and sets the source server name to
be PC1.

>Collectors_Install.exe -s HistorianPiDistributor_AddLocal=1

HistorianPiDistributor_sourceservername=PC1

72 © 2018 General Electric Company.

 5
This command installs the Historian S2S Distributor collector and sets the destination
server name to be PC2.

>Collectors_Install.exe -s HistorianS2SDistributor_AddLocal=1

HistorianS2SDistributor_HistorianS2SDistributor_destinationservername=PC2

6
This command installs the Windows Performance Collector and sets the destination server
name to be PC2.

>Collectors_Install.exe -s
HistorianWindowsPerfMonCollector_AddLocal=1
HistorianWindowsPerfMonCollector_destinationservername=PC2

After your Historian collector silent install, be sure to reboot, otherwise subsequent installs will fail.

Configure OPC Collector Support for Remote OPC Servers

After you have installed the Historian Data Collectors, you can configure OPC Collector support for remote
OPC Servers using DCOM.

1. Enter the remote OPC Server details (machine name or the IP address of the server).
2. Enter the ProgID. For example, for remote iFIX OPC server, enter Intellution.OPCiFIX.1.

© 2018 General Electric Company. 73

 NOTE: Ensure that the remote OPC server has DCOM configuration enabled.
3. Optionally, click Add Additional Remote OPC Server.

Configure DCOM settings after the installation is complete.

Searching for a Remote OPC Server ProgID

You can use any OPC client to find the ProgID of the OPC Server. Alternately, you can search from the Registry.

1. Click Start, enter regedit, and click regedit.exe.

2. Search for the CLSID of the OPC Server under My
Computer\HKEY_CLASSES_ROOT\VendorName.OPC.Name.1.
3. Use the CLSID value for the ProgID.

Offline Configuration for Collectors

Offline Configuration helps you to define the configuration properties of a collector (Taglist, Tag properties,
and collector interface properties) in XML format. This feature is particularly useful when collectors connect
to the Predix Cloud.
When collectors connect to the Historian server, the Historian Web Admin Console (VB admin or Historian
Web admin) provides you the opportunity to add tags, set tag configuration properties, and collector interface
properties.
However, when collectors connect to the Predix Cloud, there is no admin console available. Therefore, to
add and configure tags when the collector connects to the cloud, you need to use offline configuration.

Configuring Collector and Tag Properties

It is recommended that you add the Collector property section above the Tag property section in your
configuration XML file.
To enable offline configuration:

1. During the collector installation process, select the option for Offline Configuration.
This creates a sample configuration XML file in the path C:\Program Files\GE
Digital\<Collector name>\Config.
2. Add the following collector interface properties to the top of your configuration XML file.
The following is an example for the Server to Server Collector interface properties:

<Import>
<Collectors>
<Collector Name="<Collector Name>">
<InterfaceType>ServerToServer</InterfaceType>
<InterfaceGeneral1>10</InterfaceGeneral1>
......
</Collector>
</Collectors>

74 © 2018 General Electric Company.

 3. Add your TagList and Tag properties to your XML file.

<Collectors>
...
</Collectors>

<TagList Version="1.0.71">

<Tag>
<Tagname>simCollector1</Tagname>
<SourceAddress>Result =
CurrentValue("SJC1GEIP05.Simulation00002")</SourceAddress>
...
</Tag>

<Tag>
<Tagname>simCollector2</Tagname>
<SourceAddress>Result =
CurrentValue("SJC1GEIP05.Simulation00002")</SourceAddress>
...
</Tag>
...
</TagList>
</Import>

4. Add the closing </Import> tag to the end of your XML file.
5. Save your XML file and copy it to the appropriate directory.
For example, copy the Server to Server Collector file to C:\Program Files\GE
Digital\Historian Server to Server Collector\Config.
If you have an existing S2S_Offline_Config.xml file, you can rename it S2S_Offline_Con
fig_old.xml and then rename your new XML file S2S_Offline_Config.xml.

Collector Interface Properties

The collector interface properties are written in the following formal in the XML file.

<Import>
<Collectors>
<Collector Name="<Collector Name>">
<InterfaceType>ServerToServer</InterfaceType>
<InterfaceGeneral1>10</InterfaceGeneral1>
......
</Collector>
</Collectors>
</Import>

where <Collector Name> is the collector name found in the ServerToServerCollector.shw file.
You can configure the following properties:

© 2018 General Electric Company. 75

 Property Name Possible Values Example
InterfaceType ServerToServer, PI, Custom <InterfaceType>Server
ToServer</InterfaceType>
DefaultTagPrefix Any tag prefix name <DefaultTagPrefix>OfflineCloud</DefaultTagPrefix>
CanBrowseSource Yes, No <CanBrows
eSource>Yes</CanBrows
eSource>
CanSourceTimestamp Yes, No <CanSourceTimes
tamp>Yes</CanSourceTimes
tamp>
MinimumDiskFreeBufferSize Size in MB <MinimumDiskFreeBuffer
Size>150</MinimumDisk
FreeBufferSize>
MaximumMemoryBufferSize Size in MB <MaximumMemoryBuffer
Size>200</MaximumMemory
BufferSize>
ShouldAdjustTime Yes, No <ShouldAdjust
Time>Yes</ShouldAdjust
Time>
ShouldQueueWrites Yes, No <ShouldQueueWrites>No</ShouldQueueWrites>
SourceTimeInLocalTime Yes, No <SourceTimeInLocal
Time>No</SourceTimeInLo
calTime>
CollectionDelay Time in seconds <CollectionDelay>2</Col
lectionDelay>
DefaultCollectionInterval Time in milliseconds <DefaultCollectionInter
val>1000</DefaultCollec
tionInterval>
DefaultCollectionType Polled, Unsolicited <DefaultCollection
Type>Unsolicited</De
faultCollectionType>
DefaultTimeStampType Source, Collector <DefaultTimeStamp
Type>Source</Default
TimeStampType>
DefaultLoadBalancing Yes, No <DefaultLoadBalanc
ing>No</DefaultLoadBal
ancing>
DefaultCollectorCompression Yes, No <DefaultCollectorCompres
sion>No</DefaultCollec
torCompression>
DefaultCollectorCompressionDeadband Double type value <DefaultCollectorCompres
sionDeadband>0.00000</De

76 © 2018 General Electric Company.

 Property Name Possible Values Example
faultCollectorCompres
sionDeadband>
DisableOnTheFlyTagChange Yes, No <DisableOnTheFly
TagChange>No</DisableOn
TheFlyTagChange>
DefaultCollectorCompressionTimeout Time in milliseconds <DefaultCollectorCompres
sionTimeout>0</Default
CollectorCompressionTime
out>
DefaultSpikeLogic Yes, No <DefaultSpikeLog
ic>Yes</DefaultSpikeLog
ic>
DefaultSpikeMultiplier Any numeric value <DefaultSpikeMultipli
er>4</DefaultSpikeMulti
plier>
DefaultSpikeInterval Any numeric value <DefaultSpikeInter
val>5</DefaultSpikeInter
val>
DataRecoveryQueueEnabled Yes, No <DataRecoveryQueueEn
abled>No</DataRecov
eryQueueEnabled>
DefaultAbsoluteDeadbanding Yes, No <DefaultAbsoluteDeadband
ing></DefaultAbsolut
eDeadbanding>
DefaultAbsoluteDeadband Double type value <DefaultAbsoluteDead
band>0.00000</DefaultAb
soluteDeadband>
RedundancyEnabled Yes, No <RedundancyEn
abled>No</RedundancyEn
abled>
RedundancyPrincipalCollector <RedundancyPrincipalCol
lector></RedundancyPrin
cipalCollector>
RedundancyIsActiveCollector Yes, No <RedundancyIsActiveCol
lector>No</RedundancyIs
ActiveCollector>
InterfaceGeneral1 Customized for each collector <InterfaceGener
al1>10</InterfaceGener
al1>
InterfaceGeneral2 Customized for each collector <InterfaceGeneral2>4</In
terfaceGeneral2>

© 2018 General Electric Company. 77

 Property Name Possible Values Example
InterfaceGeneral3 Customized for each collector <InterfaceGener
al3>3.188.87.41</Inter
faceGeneral3>
InterfaceGeneral4 Customized for each collector <InterfaceGeneral4></In
terfaceGeneral4>
InterfaceGeneral5 Customized for each collector <InterfaceGeneral5></In
terfaceGeneral5>

Tag List and Tag Properties

The Tag List and Tag properties are written in the following format in the XML file:

<Import>
<Collectors>
</Collectors>

<TagList Version="1.0.71">

<Tag>
<Tagname>simCollector1</Tagname>
<SourceAddress>Result =
CurrentValue("SJC1GEIP05.Simulation00002")</SourceAddress>
...
</Tag>

<Tag>
<Tagname>simCollector2</Tagname>
<SourceAddress>Result =
CurrentValue("SJC1GEIP05.Simulation00002")</SourceAddress>
...
</Tag>
...
</TagList>
</Import>

You can configure the following properties:

Property Name Possible Values Example

Tagname Any name <Tagname>simTag1</Tag
name>
Description Description of tag <Description>simTag1</De
scription>
EngineeringUnits Unit of value <EngineeringUnits>Centi
grade</EngineeringUnits>
Comment Comment of tag <Comment>simTag1</Com
ment>

78 © 2018 General Electric Company.

 Property Name Possible Values Example
DataType SingleFloat, SingleInteger, <DataType>Single
DoubleFloat, FixedString, Float</DataType>
VariableString, Scaled, Byte,
Boolean, DoubleInteger,
UnsignedSingleInteger,
UnsignedDoubleInteger,
QuadInteger,
UnsignedQuadInteger, Blob, Time,
Array, MultiField
FixedStringLength <Fixed
StringLength></Fixed
StringLength>
InterfaceName <InterfaceName></Inter
faceName>
SourceAddress Tag source address <SourceAddress>Result =
CurrentVal
ue("SJC1GEIP05.Simula
tion00002")</SourceAd
dress>
CollectionType Polled, Unsolicited <CollectionType>Unso
licited</CollectionType>
CollectionInterval Interval of collection. Unit depends <CollectionInter
on TimeResolution. val>2</CollectionInter
val>
CollectionOffset Time in seconds <CollectionOffset>0</Col
lectionOffset>
LoadBalancing Yes, No <LoadBalancing>No</Load
Balancing>
TimeStampType Source, Collector <TimeStamp
Type>Source</TimeStamp
Type>
HiEngineeringUnits Any numeric value <HiEngineeringU
nits>200000.00</HiEngi
neeringUnits>
LoEngineeringUnits Any numeric value <LoEngineeringU
nits>0</LoEngineeringU
nits
InputScaling Yes, No <InputScaling>Yes</In
putScaling>
HiScale Any numeric value <HiScale>32767.00</HiS
cale>
LoScale Any numeric value <LoScale>0</LoScale>

© 2018 General Electric Company. 79

 Property Name Possible Values Example
SpikeLogic Yes, No <SpikeLogic>Yes</SpikeL
ogic>
SpikeLogicOverride Yes, No <SpikeLogicOver
ride>Yes</SpikeLogicOver
ride>
InterfaceCompression Yes, No <InterfaceCompres
sion>Yes</InterfaceCom
pression>
InterfaceDeadbandPercentRange Any double type value <InterfaceDeadbandPer
centRange>0</Inter
faceDeadbandPer
centRange>
InterfaceCompressionTimeout Time in milliseconds <InterfaceCompression
Timeout>0</InterfaceCom
pressionTimeout>
InterfaceAbsoluteDeadband Any double type value <InterfaceAbsoluteDead
band>0</InterfaceAbsolut
eDeadband>
InterfaceAbsoluteDeadbanding Yes, No <InterfaceAbsoluteDead
banding>No</InterfaceAb
soluteDeadbanding>
ConditionCollectionEnabled Yes, No <ConditionCollectionEn
abled>No</ConditionCol
lectionEnabled>
ConditionCollectionTriggerTag Name of tag <ConditionCollectionTrig
gerTag>simTag1</Condi
tionCollectionTrig
gerTag>
ConditionCollectionComparison = , EQ , < , LT , <= , LE , > , GT , >= , <ConditionCollectionCom
GE , != , NE parison>EQ</ConditionCol
lectionComparison>
ConditionCollectionCompareValue Any numeric value <ConditionCollectionCom
pareValue>0</Condition
CollectionCompareValue>
ConditionCollectionMarkers Yes, No <ConditionCollectionMark
ers>No</ConditionCollec
tionMarkers>
NumberOfElements <NumberOfElements></Num
berOfElements>
UserDefinedTypeName <UserDefinedType
Name></UserDefinedType
Name>

80 © 2018 General Electric Company.

 Property Name Possible Values Example
CalcType Raw, Analytic, PythonExpr <CalcType>Raw</CalcType>
TimeResolution Seconds, Milliseconds, <TimeResolution>Sec
Microseconds onds</TimeResolution>
InterfaceGeneral1 Customized for each collector <InterfaceGener
al1>10</InterfaceGener
al1>
InterfaceGeneral2 Customized for each collector <InterfaceGeneral2>4</In
terfaceGeneral2>
InterfaceGeneral3 Customized for each collector <InterfaceGener
al3>3.188.87.41</Inter
faceGeneral3>
InterfaceGeneral4 Customized for each collector <InterfaceGeneral4></InterfaceGeneral4>
InterfaceGeneral5 Customized for each collector <InterfaceGeneral5></In
terfaceGeneral5>

Installing the Historian Excel Add-in

You must have Microsoft Excel installed on your computer.
You install the Excel Add-In package as one of the standard installation options from the Historian installation
program.
Run the install on the computer on which you want to use the Excel Add-In and select the Excel Add-In
option from the list of options to install.
You can also install the Excel Add-In by Installing Historian Client Tools on page 67 on a machine that does
not have the Historian Administrator or archive installed.

1. Run the Historian install.

The Historian splash screen appears.
2. Click Historian Excel Add-in.
The installation runs and completes.

Note: On a 64-bit Windows operating system, the default destination folder for all 32-bit components
(such as collectors and APIs) is C:\Program Files\Historian\x86. Similarly, for all 64-bit
components (such as Excel Add-in 64-bit and SQL Server 64-bit), they are installed in C:\Program
Files\Historian\x64.

3. If asked to restart your system, click Yes.

Once the restart is completed, you can activate the Excel Add-in.

© 2018 General Electric Company. 81

 Activating the Add-In for Microsoft Excel 2016/2013/2010
1. Open a new Microsoft Excel 2016/2013/2010 worksheet.
2. Select File > Options.
The Excel Options dialog box appears.
3. Click Add-Ins.
4. In the Manage drop-down list, click Excel Add-ins and click Go.
The Add-Ins dialog box appears.

5. Select Historian Add-In and Proficy_Historian_Helper and click OK.

The Add-In is now ready to use and the Historian menu is now available in the Microsoft Excel toolbar.

If the Historian Add-In is not listed, click the Browse button to locate the Historian.xla file.
If you install the Excel Add-In prior to installing Microsoft Excel, the install program copies the
Historian.xla file to your Historian folder (typically, C:\Program Files\Proficy\Historian
or C:\Program Files (x86)\Proficy\Historian).
If you decide to add the Excel Add-In after installing Excel, open Excel and on the Tools menu, select
Add-Ins and then from the dialog box that appears, click Browse to locate the Historian.xla file.

82 © 2018 General Electric Company.

 If you uninstall Historian after installing the Excel Add-In as described, ensure that you clear the Historian
check box in the Microsoft Excel Add-Ins dialog box. If you do not clear this option, you will receive an
error each time you open Microsoft Excel.

Activating the Add-In for MS Excel 2007

1. Open a new MS Excel 2007 worksheet.
2. Click File > Options.
The Excel Options dialog box appears.
3. Click Add-Ins.
4. In the Manage drop-down list, click Excel Add-ins and click Go.
The Add-Ins dialog box appears.

5. Select Historian Add-In and Proficy_Historian_Helper and click OK.

The Historian Add In menu is now available in the Microsoft Excel toolbar.

© 2018 General Electric Company. 83

 Activating the Add-In for MS Excel 2003
1. Open a new Excel 2003 worksheet.
2. Select Tools > Add-Ins.
The Add-Ins dialog box appears.

3. Select Proficy Historian Add-Inand click OK.

The Add-In is now ready to use and the Historian menu is now available in the Microsoft Excel toolbar.

Installing Alarms and Events

Selecting the Install Alarms and Events option in the Install Historian screen installs the Historian Alarm
Archiver. You must specify the SQL Server database details for the archiver, as the archiver requires access
to SQL Server.

Important:
• If you have the Alarms and Events component installed on a pre-7.0 version of Historian, then after
you upgrade to Historian Server 7.0, you must install the Alarms and Events component separately.
• The Alarms and Events component must be installed on the same machine as the Data Archiver.
• When upgrading from 4.5 to 7.0 Alarms and Events, since the DB Schema for 4.5 is different, if you
select the same database name that is pre-populated by default, you will get an error message:
Later or Higher version of Alarms and Events database is already in
stalled. Hence, you cannot proceed further. You need to enter a different database
name and then proceed with the upgrade.

To install Alarms and Events:

1. Run the Historian install.

The Historian splash screen appears. If this screen does not automatically appear, double-click the
InstallLauncher.exe file on the ISO or DVD to display it.

84 © 2018 General Electric Company.

 2. Click Install Alarms and Events.
The Alarm and Event Archiver screen appears. The Server Name and Database Name fields might be
auto-populated with default values.
3. To change either of these fields, type a different entry in the respective text box.
The Server Name is where SQL Server is installed and the Database Name is for the database where
the alarms and events are archived.
4. Select the box for Use SQL path as data and log path and enter the SQL Server login credentials in the
Admin User and Password fields.
If you choose to use Windows Authentication, select the box for Use Windows Authentication and enter
your Windows admin credentials in the Admin User and Password fields.
5. Click Next.
It may take several minutes for the installation to complete.
6. If asked to restart your system, click Yes.
7. To verify that the Alarms service has started, go to the Services window and look for the Historian Alarm
Archiver.
Startup Type is Automatic, meaning it is started automatically when the system is started or restarted.
Historian's Alarm and Event (A&E) archiving offers the ability to collect A&E data from any OPC-compliant
A&E server and store it in an integrated relational database. Historian Alarm and Event data is associated
with the related process data from its source to allow for quick analysis.
For more information, refer to Historian Alarms and Events.

Using a Remote SQL Server to Store Alarms

If you have chosen to connect Historian to a remote SQL Server, you must ensure the following conditions
are met:
• The Historian Alarm Archiver service must be run on a user account that has privileges to log into the
SQL Server using Windows Authentication.
• The Default Backup Path, found on the Archive screen, must be a shared directory that is accessible to
both the Historian Data Archiver and the remote SQL Server. It is recommended that this shared directory
be placed on the same computer as the Historian Data Archiver service.

Installing the Historian Administrator

You must run the Client Tools install before installing the Historian Administrator. In addition, during the
Installing Historian Client Tools on page 67, Historian Administrator is selected by default and is installed
along with the Client Tools. If you want to install the Historian Administrator at a later time, deselect the
check box before continuing with the Client Tools installation.
You can install a Historian Administrator on any node that connects to the Server through a Historian API.

1. Run the Historian install.

The Historian Splash screen appears.
If this screen does not appear, double-click the InstallLauncher.exe file on the ISO or DVD to
display it.

© 2018 General Electric Company. 85

 2. Click the Install Client Tools link.
The Select Features screen appears.
3. Click Run.
The Welcome screen appears.
4. When the Install Wizard appears, select the Historian Administrator option in addition to any previously
installed Historian components, and then click Next.
The program installs the Historian Administrator and any other components associated with it, including
the API. If you prefer, you can install the Historian Administrator at the same time you install other options,
by selecting all desired options at once.

Note: If you intend to run all components (Historian Server, Collectors, and Client tools) on a single
computer, choose Install Historian on the splash screen and proceed with the installation wizard.

Starting the Historian Non-Web Administrator

To start the Historian Non-Web Administrator, you must be a valid Windows user on the Historian Server.
A screen resolution of 1024 x 768 or above is recommended for Historian Non-Web Administrators.

1. From the Start Menu, select Programs>Historian <version>.

2. Select Historian Administrator to open the application.
The system attempts to connect to the default server using the current logged in user and password.
The Historian System Statistics screen appears.

Tip: As an alternative, you can create a shortcut and start Historian Administrator from a desktop
icon.

3. To specify another user name, or to switch servers:

a) Click on the Main link.
The Login dialog box appears.
b) Select a server from the drop-down list or click the Browse button to browse for a server.
c) Enter your user name, password, and domain, if any, and then click OK.
The Historian System Statistics screen appears. You can now proceed with all Historian Administrator
functions.

Installing the Historian HDA Server

Both the Historian Administrator and Historian HDA Server are installed by default when you install the
Client Tools. It is recommended that you keep the default selections when you are installing Client Tools,
because if you deselect them during the initial Client Tools installation, and then go back to install them,
any check box that you deselect during the second install will uninstall the deselected component.

Note: If you choose to install the HDA server at a later time, make sure that Historian Administrator is
installed before you install the HDA server, or select them together in the Select Features screen.

You can install the Historian OPC HDA Server on any server on which the Historian Server has been installed.

86 © 2018 General Electric Company.

 1. Run the Historian install.
The Historian Splash screen appears.
If this screen does not appear, double-click the InstallLauncher.exe file on the ISO or DVD to
display it.
2. Click the Historian Client Tools link.
The Select Features screen appears.
3. Select HDA Server and click Next.
4. Click Run.
The Welcome screen appears.
5. Click Next.
The License Agreement screen appears.
6. Click Yes.
The Select Features screen appears.
7. Select the component (HDA Server) that you want to install, and click Next.
The Choose the Program Folder screen appears.
8. Accept the default destination folder or browse for a new location, and click Next.
The Historian Server Name screen appears.

Note: On a 64-bit Windows operating system, the default destination folder for all 32-bit components
(such as collectors and APIs) is C:\Program Files\Historian\x86. Similarly, for all 64-bit
components (such as Excel Add-in 64-bit and SQL Server 64-bit), they are installed in C:\Program
Files\Historian\x64.

NOTE: When the HDA Server option is selected, then the Historian install wizard will install Microsoft .NET
Framework 4.5 and the OPC Core Components 3.00 redistributable during the installation process.
9. Enter the Historian Server name and click Next.
10. Read the Configuration Review screen and click Next.
11. Select Yes, I want to restart my computer now, and click Finish to complete the installation.

Installing Historian SDK

If you need to create customized programming for the Historian Server, use the Historian Software
Development Kit (SDK) with Visual Basic or any application that provides a VBA programming interface, such
as iFIX, Microsoft Excel or Microsoft Word. The Install Wizard places the Historian SDK in the System32
directory and automatically registers it. To use the SDK, set up a project reference with the Historian SDK.

Installing the Historian Client Access API

The Historian Client Access API is a .NET assembly that interacts with Historian from any .NET applications.
It is installed automatically when the Historian Client Tools are installed.

© 2018 General Electric Company. 87

 For Microsoft .NET-based application development, use the Historian Client Access API with C#, VB .NET, or
any .NET compliant application. By default, the Install Wizard places both the API and Client Access .dlls
in GAC (Global Assembly Cache). If you want to reference it to any client application, you can refer the
following file path: INSTALLPATH\Assembly\Historian.ClientAccess.API.dll.

Important: It is recommended that you add Historian Client Access API references from the
INSTALLPATH directory since global assembly cache is part of the run-time environment.

88 © 2018 General Electric Company.

Migrating Historian Data

Migrating the Alarms and Events Database from 4.5 to 7.0

Before migrating alarm and event data, ensure that you have backed up the data.
If you are upgrading to Historian 7.0 and you have already collected alarms, you can migrate the Historical
Alarm and Event data after upgrading to Historian 7.0. Alarms are not available for retrieval until they are
migrated. New alarms collected will be available immediately.
To migrate your alarms into the new alarm database, you must do a backup of the old alarms and restore
them into the new database. The backup can be done before upgrade using the old Historian Administrator
or it can be done after upgrade using the Proficy Alarm Database Migration Tool.

To launch this tool, go to \Program Files (x86)\Proficy\Proficy DataBase folder and

launch Proficy.Historian.AandE.Migration.exe.

Backing Up Alarm and Event Data

To back up the Alarm and Event data:

1. Click the Backup Existing Alarms and Events tab.

2. In the Time Range section, in the From and To fields, set the start time and end time.
You may need to migrate small time periods if you have many alarms. If you need to migrate the alarms
in blocks of time, do the oldest alarms first.
3. In the Database Name field, enter the name of the database you are backing up.
Typically, this will be the same as the SQL Server you are currently using.
4. Select either Use Windows Authentication or Use SQL Authentication.
5. In the User Id and Password fields, enter the login credentials. Be sure to use a user name with permission
to connect and backup alarms.
6. In Backup Folder Path field, give the absolute path, including file name, to store the backed up alarms.
For example, c:\temp\March2010.bak. Provide the path to place the backup folder on the local
computer, and if your SQL server is running on a remote computer, enter a path that exists on the remote
computer.
7. Click Test Connection to check if the source database is active and the information is accurate.
The Begin Backup button is activated.
8. Click Begin Backup.
When the backup is complete, a count of rows backed up is displayed.

Migrating Historical Alarm and Event Data after Upgrade from 4.5
If you are upgrading to this version of Historian and you have already collected alarms, you can migrate
the Historical Alarm and Event data after upgrading. Alarms are not available for retrieval until they are
migrated. New alarms collected will be available immediately.
Before migrating alarm and event data, ensure that you have backed up the data.

© 2018 General Electric Company. 89

 To migrate your alarms into the new alarm database, you must do a backup of the old alarms and restore
them into the new database. The backup can be done before upgrade using the old Historian Administrator
or it can be done after upgrade using the Proficy Alarm Database Migration Tool.
To launch this tool, go to \Program Files (x86)\Proficy\Proficy DataBase folder and run
Proficy.Historian.AandE.Migration.exe.

Uninstalling Historian
Uninstalling Historian removes all saved Favorites from your Trend Client and all Users and Scopes you
created. To keep these and other configurations on an upgrade, do not uninstall Historian unless you are
changing server roles as previously described. If you must uninstall Historian on an upgrade, you can Export
your favorites and save your data and tag configuration files for future use.
For information on uninstalling OPC Data Collectors, refer to the Modifying and Uninstalling OPC Collectors
section of the Historian Data Collectors manual.

1. To uninstall Historian from your computer:

a) Double-click the Programs / Uninstall a Program link in the Control Panel.
b) Select Historian and click Uninstall.

Note: Historian archives are not removed by default. If you need to remove them, delete the
folder manually.

A progress meter appears, showing that the software is being uninstalled. This may take some time.
To abort the uninstall, click Cancel.

2. To remove all related software from your computer:

a) Double-click the Programs / Uninstall a Program link in the Control Panel.
b) Select Proficy Common Licensing, and click Uninstall.

Using the Migration Tool

The IHA Migration Tool (MigrateIHA.exe for 32 bit or MigrateIHA_x64.exe for 64 bit) allows you to migrate
data up to 30 years old if the data is already stored in IHA files from any version of Historian. Use the
Migration Tool to move data from one archiver to another when you cannot simply restore the IHA in the
Historian Administrator.
The Migration Tool opens an IHA file as a binary data file and reads the raw samples from it. Those raw
samples are then written to a destination archiver, in a similar way to how an OPC collector or File Collector
would write data. Any errors returned from the data archiver are reported in the main window and repeated
in the log file.

Note:
• You can migrate UserDefined types, MultiField tags, and Array tags.
• When you are migrating the Data Stores, the source data store is created in the destination.

90 © 2018 General Electric Company.

 • Using this Migration Tool, you can upgrade from two previous versions of Historian to the latest
version.
• The performance of this tool is impacted with the addition of Client Manager and Configuration
Manager. For best performance, use this on a Single Server install only.

Migrating Historical Data

You need to run this tool as an administrator to migrate and create the log files in the C:\ directory.
To migrate historical data stored in IHA files from any version of Historian:

1. In the Historian folder, double-click the Migration Tool executable (MigrateIHA.exe for 32-bit or
MigrateIHA_x64.exe for 64-bit) to open the IHA Migration Utility.

The icon for the executable looks as follows: .

2. Select Configure Options from the Options menu.
3. Enter or modify any specific configuration information.
When choosing an IHC file, do not specify one currently in use by the Data Archiver. (For more information,
see Configuring Migration Options on page 91.)
4. Select File > Migrate Historical Data .
The Select Historical Data File(s) dialog box appears.
5. Select a historical file and click Open.
Refer to the IHA Migration Utility main screen for information on the progress of the migration and any
encountered errors.

Note:
The IHA Migration Utility screen only displays the most recent lines of the log file. For the full set of
logged messages, refer to the log file, typically located in C:\IHAMigration.Log.

6. Optionally, perform these steps:

a) You can upgrade the older version's archive files to the latest version by selecting the bulk upgrade
option.
Stop the Data Archiver service and select File > Bulk Upgrade Historical Data.
If you do a bulk upgrade of historical data immediately after you install the latest version on Historian,
then save on upgrading while the system reboots.
b) To clear the log messages displayed in the screen, select File > Clear Display.
c) To view the logs saved in the IHAMigration.log file, select File > View Log File > ..

Configuring Migration Options

1. In the Migration tool (MigrateIHA.exe for 32 bit or MigrateIHA_x64.exe for 64-bit)., select Options
> Configure Options.
The Migration Options dialog box appears showing the default server information and the default
migration options.

© 2018 General Electric Company. 91

 2. Enter options the following options.

Server Pane

Field Description
Server The default server (set during installation). If you do not want to write data to
the default server, enter the desired server in this field.
Username and Password If you have created and established Security Groups in your Historian Security
Environment, you may need to enter the user name and password here. By
default, if you do not supply any information, the current logged in user will be
used in security checking. For more information about Historian Security, please
refer to the Implementing Historian Security chapter.

Options Pane

Field Description
Throttle Output Select this option to throttle any part of the migration process. Optionally, you
can remove this option as required. By default, throttling is rated at 5000 events
per second.
If you select this option, the migration might be a bit slow.

Migrate Messages Select this option to migrate the messages into the newly created archive. Using
this option may or may not reduce the size of your archives, depending on the
number of messages stored in the archive. By default, messages are migrated.
Log File Full Name Modify the location of the IHAMigration.log.

92 © 2018 General Electric Company.

 Field Description
Config File The configuration (*.IHC) file that you want to migrate. You must provide the
IHC file before selecting an IHA file. Do not specify an IHC file currently in use
by the Data Archiver.

Tip: It is always advisable to take a copy of the configuration file and work
on the copy rather than working on the original file.

Tags to Migrate Pane

Option Description
Migrate All Tags Select this option to migrate all the tags from the selected archiver.
Migrate only tags that Select this option to migrate all the tags that exists in the source destination.
exist in destination
Migrate using tag mask Select this option to migrate tags with the mask specified. You can specify an
exact tag name to migrate that tag only.
Migrate only tags that To migrate the tags that are present only with the source config file.
exist in source config file

Time to Migrate Pane

Option Description
Use IHA TimeFrame Select this option to migrate all the tags which has the IHA time frame.
Use Below TimeFrame Select this option to migrate all the tags in the specified time frame. You need
to specify the Start Date/Time and End Date/Time if you select this option.

Data Migration Scenarios

You can migrate tags and their data on the same Historian Server or between servers. When migrating your
data, consider the following guidelines:
• Get new collection working first
When the data is collected from the collectors or the API programs, then you should consider adding
the tag definitions into the destination server and directing data to be written there before you start
migration, because migration may take several hours or days.
• Migrate data from oldest to newest
It is advisable to migrate the oldest data first and then the newest, to make the optimal use of archive
space.
• Pay attention to TagID
Every tag in Historian 4.5 and above has a property called TagID, that uniquely identifies it and allows
data retrieval to locate the data. Even if you have a tag of with the same name in another archiver, that

© 2018 General Electric Company. 93

 tag has a different TagID and is considered as a different tag. You can see the TagID of a tag in the Excel
Tag Export. Preserve that number when moving a tag from one system to another.

The following are commonly used scenarios while migrating data on the same Historian server or between
servers.
• Migrating a Tag and its data from one data store into another data store. See
• Merging a Historian Server into an existing data store on another machine. See Merging a Historian
Server on page 94.

Migrating a Tag and its Data

If you want to separate a single large user data store of tag into multiple smaller data stores on the same
machine, and if your software license allows it, then you should assign the tag to the new data store and
then migrate the data.
Consider when data is collected for the year 2009 in Tag1. The collected data is archived in the default User
data store. If you want to move Tag1 residing in the User data store to another data store, (for example,
the Motor data store), then you must create the Motor data store if it does not already exist and if your
license allows it.
The next step is to change the data store of the tag. You can change the data store of the tag either using
Historian Administrator or using Excel Tag Import. The new incoming data gets collected in the Motor data
store. If you do a raw data query, you will get only the latest data and the previous data will not be available.
To get the old data, you must migrate the data residing in the User data store to the Motor data store.
To migrate a tag and its data from one data store to another data store on the same server:

1. Use iharchivebackup -c to make a backup of the .ihc file.

The backup of the Config file is automatically created in the Archives folder.
2. In the Historian Administrator, back up each archive from oldest to newest.
3. Launch the Migration Tool (MigrateIHA.exe for 32-bit or MigrateIHA_x64.exe for 64-bit) using
Administrator privileges.
4. Select Options > Configure Options.
5. In the Server pane, enter the Server name.
6. In the Options pane, enter the IHC File path in the Config File path field, using the browse button. This
is the path to the IHC backup that you made in step 1.
7. In the Tags to Migrate pane, select the Migrate Using Tag Mask option and enter the Tag Name you
moved to the new data store.
8. In the Time to Migrate pane, ensure the Use IHA TimeFrame option is selected.
9. Select File > Migrate Historical Data.
10. Select the archive file that you backed up in Step 2 and monitor the progress of the migration. When the
migration is complete, query the data to see the migrated data can be queried. Repeat with the remaining
archives from oldest to newest.

Merging a Historian Server

A typical scenario is to merge a Historian Server into an existing data store on another machine.
If your system architecture has evolved from multiple smaller servers into fewer large archives, you can
eliminate the smaller machines while preserving all your tag configuration and collected data.

94 © 2018 General Electric Company.

 Consider the following example. You have two machines, Machine A and Machine B. Machine A is running
current or any earlier version of Historian and has 100 tags and 10 archive files. The data of these tags are
collected from the collector and is being queried by users. Machine B is running the current version of
Historian.

Note:
• This example does not include Alarm migration. If Machine A was being used to store alarms, then
you need to migrate those before eliminating Machine A.
• You cannot migrate tags with Enumerated Data Sets. If you want to migrate data for Enumerated
Data Sets, then you must create the Enumerated Data Sets in Historian Administrator or Microsoft
Excel and then migrate the tags.
• To migrate tags which are condition based triggers, then you must create the condition-based
triggers for that tag in Historian Administrator or Microsoft Excel and then migrate the tags.

You can migrate data only if the file format of the archive files format is .IHA. If the back-up archive is in
.zip format, extract the zip files and copy all the .IHA files separately in a folder.

1. Before migrating, copy the .IHC and all the .IHA files from Machine A to Machine B.
2. Launch the Migration Tool (MigrateIHA.exe for 32-bit or MigrateIHA_x64.exe for 64-bit) with
Administrator privileges.
3. Select Options > Configure Options.
4. In the Server pane, enter the Server name.
5. In the Tags to Migrate pane, ensure that the Migrate All Tags option is selected
6. In the Options pane, enter the IHC File path in the Config File path field, using the browse button. he
path you enter is the path to the .IHC file brought over from Machine A.
7. In the Time to Migrate pane, ensure the Use IHA TimeFrame option is selected.
8. Ensure Throttle Output is selected.
9. To migrate the data, select File > Migrate Historical Data and select the archive file that has the oldest
data.
The tags and data are migrated to the default data store in time slices. The MigrateIHA window displays
the progress and any Tag Add or Data Add errors are displayed in the log file. You can estimate the
remaining time by watching the progress.
10. Repeat the previous steps for each of the remaining archives, from oldest to newest data.
11. Add the collector to the Historian Server on Machine B.
See the Adding a Data Collector to an Historian Server topic in Data Collectors - General ebook

Migration Tool Command-Line Syntax

Command Syntax
• For 32-bit:

MigrateIHA.exe "<IHA file name with full path>" "<IHC filename with full
path>"

© 2018 General Electric Company. 95

 • For 64-bit:

MigrateIHA_x64.exe "<IHA file name with full path>" "<IHC filename with
full path>"

Command-line Options

Option Description
/NOTHROTTLE This does not throttle any part of the migration process, but may impact resources
on the server. Optionally, you can remove this switch as required. By default, throttling
is rated at 5000 events per second.
/NOMESSAGES This does not migrate messages into the newly created archive. Using this switch
may or may not reduce the size of your archives, depending on the number of
messages stored in the archive. By default, messages are migrated if this switch is
not used.
/EXISTINGTAGS This will migrate data for only those tags that exist in the destination archiver.
/b This option of the start.exe file allows the IHA Migration tool to start without
opening a new window for each instance.
If you are migrating a pre 4.5 IHA file you will need to have the IHC file for that IHA
and specify the IHC file in the Options dialog or on the command line. Otherwise, you
will get a warning message.

/wait This option of the start.exe file allows each instance of the IHA Migration tool to
complete the migration before starting the next migration in the sequence.

Notes
• If you are migrating from a command line using Historian 6.0 or above, you need to pass the IHC file.
• If you do not have the IHC or you are not sure you have the correct IHC then you should use the pre-4.5
version of MigrateIHA to migrate the IHA. Otherwise, the data will not migrate correctly.
• You should keep a copy of the original IHA file.
• The IHC must contain all the tags that are in the IHA file, so use the most current IHC you have.
• You must use double quotes when you enter the IHA and IHC file even if you do not have spaces in your
file path or file name.
• Migrating an IHA will upgrade it to 4.5 format.
• If you are migrating a 4.5 IHA you should provide the IHC file in the Options dialog but if you do not have
the IHC you can safely continue past the warning message.

Creating a Batch File to Migrate Multiple IHA Files

The IHA Migration utility migrates only one archive at a time by design. However, if you need to add more
than one archive at a time, you can create a batch file to automate multiple archive merges.
When creating a batch file you need to provide the batch file with a logical name and save the batch (.bat)
file in a location that can be easily accessed using the command prompt.

Note: When migrating any archive, you should start with the archive with the oldest data first, followed
by newer data, in sequence, to minimize the amount of disk space used in the Data Archiver.

96 © 2018 General Electric Company.

 For example:

cd c:\Program Files\Historian
start /b /wait migrateiha /NOTHROTTLE /NOMESSAGES
"c:\Historian Data\Backups\server_Archive001.iha"
"c:\Historian Data\Backups\server_Config.ihc".

Interoperability of Historian Versions

Interoperability guidelines for Historian versions include:
• Historian Collectors below v6.0 can write to Historian v7.0 Archivers; however, since the earlier collector
versions cannot automatically connect to a mirror, users need to point those collectors to the mirror
system.
• Historian Clients below v6.0 can retrieve data from Historian v7.0 Archivers.
• Historian v7.0 or later Clients can retrieve data from a single Historian Data Archiver below v6.0.
• Historian v7.0 or later Collectors can write to a single Historian Data Archiver below v6.0.
• An SDK program built on an Historian v7.0 or later node does not run on an Historian below v6.0.
• An SDK program that you created in Historian below v7.0 must be rebuilt on a computer with Historian
v7.0 or later if you want to run it on that version.
• It is recommended that you use consistent versions of client and server applications. If you do use
different client and server versions of the Historian, regularly back up all archives and tag configurations.

Note: To determine the version of the server, client, and SDK, click the About link in the Historian
Administrator. The version of the Historian installer can be seen in the Control Panel / Uninstall
programs; this version is different from the Historian core version seen in the Historian Administrator
About link.

© 2018 General Electric Company. 97

 Implementing Historian Security

Implementing Historian Security

Historian is a high performance data archiving system designed to collect, store, and retrieve time-based
information efficiently. By default, access to these Historian archives, tags, and data files is available to any
valid operating system user account. In this default environment, all users are allowed to read, write, change,
and delete archives, tags, or data files in the Historian Administrator, SDK, Migration Tools, and Excel Add-In.
However, you may find that you want to make these functions and data available only to authorized
personnel. You can do this by creating and defining Historian Security Groups in your Windows Security.
Historian includes an Electronic Signature and Electronic Records security feature. This option provides
installations concerned with the FDA's 21 CFR Part 11 regulation or any site interested in added security or
tracking the ability to require a signature and password every time a change in data or configuration is
requested. For more information on the Electronic Signature and Electronic Records feature, refer to the
Using Historian in a Regulated Environment section of the Using the Historian Administrator manual.
To ensure a secure environment when using Historian security, do not create any local user accounts unless
Historian is set up on a standalone machine.
Whether or not you use Historian security, make sure that you disable Guest accounts on your computer
to limit access to valid Windows user accounts.
There are two ways in which the UAA commands can be executed. You can select one of the two for adding
users and clients to the UAA server:
• Using the UAA Config Tool on page 106
• Adding a UAA User on page 108

About Protecting Your Process

If you want to restrict access to Historian archives, files, and tags, or protect your data files from unauthorized
changes, you can enable Historian security. Using security is optional and is disabled by default. By enabling
security, you can restrict access to the following:
• Modifying data using the Excel Add-In
• Updating security for individual tags or groups of tags
• Creating, modifying, and removing tags
• Tag protection (adding, modifying, removing, and so on) can be applied at a global level to all tags or at
the individual tag level.
Refer to Implementing Tag Level Security for more information.
• Reading data in the iFIX Chart object, Excel Add-In, and Migration Utilities
• Writing data
• Starting and stopping collectors
• Creating and deleting collectors
• Creating, modifying, and deleting archives
Historian uses the operating system security groups to create a security structure. You enable security for
a particular set of functions by adding specific Historian Security Groups to your groups. You can also add
security groups to your domain controller. Refer to the Security Tab section in the Historian Administrator
Manual for information on selecting local or domain security groups.

98 © 2018 General Electric Company.

 By defining one or all of the groups, you begin to set up a security structure. Refer to the Historian Security
Groups section for more information on the Historian Security Groups available.

Strict Authentication
With Historian's strict user account authentication features, Enforce Strict Client Authentica
tion and Enforce Strict Collector Authentication, you can control access to the Historian
server and safeguard user account credentials.
With strict authentication enabled, only known user accounts configured on the Data Archiver server
computer will be able to access a Historian server. Similarly, enabling strict collector authentication enforces
the same requirement for incoming collector connections.
For an account to be known at the Data Archiver, it has to exist on that archiver as a local account or exist
on a Domain Controller available to the data archiver. Historian will access the local accounts or Domain
Controller via Microsoft’s Security Support Provider Interface (SSPI) and this involves having a Kerberos
server setup optionally to assist in account validation.
By default, strict client and collector authentication is enabled on new installations to maximize security.
When upgrading from a previous version of Historian, strict client and collector authentication is disabled
to allow compatibility with older clients or collectors that cannot be upgraded concurrently.
It is recommended that all clients and collectors receive timely upgrade to the latest version, which permits
enabling both strict client and collector authentication on the server for the highest security configuration.
By treating clients and collectors separately, it is possible to accommodate new and legacy authentication
during the upgrade process. However, upgrading all clients and collectors to the latest version immediately
will achieve a high level of security. The two options, Enforce Strict Client Authentication and Enforce Strict
Collector Authentication, permit flexibility during the upgrade process by selectively accommodating legacy
clients and collectors.

Strict Authentication Options

This table provides guidelines about the different combinations of strict client and collector authentication
options and their use:

Strict Client Strict Collector Comment

Authentication Authentication
Enabled Enabled Use this for highest available security. You will need to install
SIMs, if available on all pre-6.0 collectors and clients. Clients can
refer to any program that connects to the Data Archiver. This
includes Historian Administrator, Microsoft Excel, any OLEDB
program, user written programs, or any other Proficy software.
Enabled Disabled Use this if you are unable to upgrade collectors to the latest
version if there is no SIM update for your collector.
Disabled Enabled Use this if you have to support legacy clients and you are unable
to install the SIM update on all clients.
Disabled Disabled Use this for maximum compatibility with existing systems.

For more information, refer to the product IPI (Important Product Information) ebook or SIM release notes.

© 2018 General Electric Company. 99

 Disabling Strict Client and Collector Authentication
To permit older versions of clients and collectors to access a Historian 7.0 (or later) server, disable strict
client and collector authentication.

1. Open the screen and click the DataStore MaintenanceSecurity tab.

2. In the Global Security section:
• Select the Disabled option button for Enforce Strict Client Authentication.
• Select the Disabled option button for Enforce Strict Collector Authentication.

Trusted Connections in Distributed Historian Service Environment

This trusted connection works only in the Domain environment and it is enabled by default.

Note: If you are adding a mirror copy to an existing node, make sure that both the nodes are in the
same domain.

If you want to work in the workgroup setup, contact Online technical support &
GlobalCare:www.digitalsupport.ge.com.

Security Strategy Guidelines

When you begin to implement security, you should first define a clear strategy. Consider the following when
beginning to set up your security strategy:
• If you disabled the Guest account, a user must provide a valid username and password even if no groups
are created.
• Protection is only provided for the functional areas for which you have built the associated Historian
Security Groups.
• If you only choose to define some of the security groups, all users still have all access to any uncreated
groups. All users are still assumed to be a member of a group unless that group has been created, with
the exception of iH Audited Writers group. You must add the iH Audited Writers group to the Windows
security groups so that a user can become a member of this group.
For example, if you elect to define the iH Security Admins group and iH Archive Admins group, both the
members associated with those defined groups and all other valid users still have access to such functions
as creating and modifying tags until you create the iH Tag Admins security group.
• If you implement any Historian Security groups, you must first add and define the iH Security Admins
group.

Note: If you do not create and define the iH Security Admins group, all valid users are assumed to be
members of this group. This membership overrides any other security group that you set.

See also Historian Security Groups on page 101.

Setting Historian Login Security

Use Historian Login Security settings if you want to validate users at the Data Archiver, instead of at the
client. By applying these settings, users and applications are forced to provide a user name and password
at connect time so that the archiver can validate them. For example, users in the security group such as
ih Security Admins will be checked by the Archiver.

100 © 2018 General Electric Company.

 For Historian Login Security settings, you can view and set the property from the HistorianSDKsample server
properties. The current setting is shown in the data archiver SHW file.
Historian Login Security property is available only in Historian SDK.
To set login security using the Historian SDK:

1. Run the SDK sample.

2. Connect to a server.
3. Select the server in the list box.
The Server Properties dialog box appears.
4. On the right side of the dialog box, locate the AllowClientValidation setting. By default, this value is set
to TRUE. Click to set to FALSE, and click OK.

Historian Security Groups

Historian provides the following security groups:
iH Security Admins Historian power security users. Security Administrators have rights to all
Historian functions. This group also has the ability to change tag level security,
archive security, and modify the Electronic Records and Signatures option. This
is the only Historian security group that overrides tag level security.

iH Collector Admins Allowed to start and stop collectors, browse collectors, configure collectors,
and add new collectors.

iH Tag Admins Allowed to create, modify, and remove tags. Tag level security can override
rights given to other Historian security groups. Tag Admins can also browse
collectors.
iH Tag Admins are not responsible for setting Tag Level Security. This task can
only be performed by an iH Security Admins. For more information on setting
Tag Level Security, refer to the Implementing Tag Level Security section.

iH Archive Admins Allowed to create, modify, remove, backup, and restore archives.

iH UnAudited Writers Allowed to write data without creating any messages.

iH UnAudited Logins
Allowed to connect the DataArchiver without creating login successful audit
messages.

iH Audited Writers Allowed to write data and to produce a message each time a data value is
added or changed.
Tag, archive, and collector changes log messages regardless of whether the
user is a member of the iH Audited Writers Group.

iH Readers Allowed to read data and system statistics. Also allowed access to Historian
Administrator.

© 2018 General Electric Company. 101

 Historian Security Group Rights

Use this table to identify the types of user groups you need to create and define in your security system.

Function iH iH iH iH iH iH iH Tag iH
Security UnAudited UnAudited Audited Readers Archive Admins Collector
Admins Writers Login Writers Admins Admins
Create Tags: X X
• Excel Add-In
• SDK
• Historian Admins
• File Collector

Remove Tags: X X
• Historian Admins
• SDK

Modify Tags: X X
• Historian Admins
• Excel Add-In
• SDK
• File Collector

Modify Archive Security: X

• Historian Admins
• SDK
•
•

Backup Archive: X X
• Historian Admins
• SDK

Restore Backup: X X
• Historian Admins
• SDK

Create Archive: X X
• Historian Admins
• SDK

Start/Stop Collector: X X
• Historian Admins
• SDK

102 © 2018 General Electric Company.

 Function iH iH iH iH iH iH iH Tag iH
Security UnAudited UnAudited Audited Readers Archive Admins Collector
Admins Writers Login Writers Admins Admins
• Mission Control (iFIX)

Browse Collector: X X
• Historian Admins

Read Data: X X
• Chart Object
• Excel Add-In
• SDK

Write Data (UnAudited): X X

X
• Excel Add-In
• SDK

Write Data (Audited): X X

• Excel Add-In
• SDK

Modify Data: X X X X
• Excel Add-In
• SDK

Update Security for Tag: X

• Excel Add-In
• SDK
• Historian Admins

Migrate X
• Migration Tools

Login Connection Messages X X X X X X X

Security Setup Example

The following example takes you through the process of establishing your security needs and defining and
setting up the levels of security.
For this example, assume the following user needs in a plant of 14 users:

User Needs Added to Security Group

USER1 Power user. Needs total access to security. iH Security Admins

© 2018 General Electric Company. 103

 User Needs Added to Security Group

USER2 • Read/Write Data (no messages). • iH UnAudited Writers

USER3 • Create, modify, and delete tags. • iH Tag Admins
• Backup, restore, and create archives. • iH Archive Admins
USER5
• Connect to Data Archiver without creating login • iH UnAudited Logins
USER6 successful audit messages
USER8

USER4 • iRead/Write Data (no messages). • iH UnAudited Writers

USER7 • iCreate, modify, and delete tags. • iH Tag Admins
• iStart/Stop Collectors. • iH Collector Admins
• iBackup, restore, and create archives. • iH Archive Admins

USER9-14 Read Data. iH Readers

1. Establish the needs of your users. For this example, assume the user needs in a plant of 14 users, as
described in the previous table.
2. Add and define the iH Security Admins Group.
Once you determine that you want to establish a security structure, you must create and define the iH
Security Admins group. This group of users is typically the "power users" of the Historian. Security
Administrator rights allow them to manage configuration and give them free rein to the entire system.
For this example, only USER1 would be added to the iH Security Admins group.
3. Establish and create any other Historian Security Groups as needed.

Note: Any user with Windows administrative permissions can add or remove Windows groups and
users. As such, an administrator on a Windows computer, can add himself to any Historian security
group.

Set up the functional security groups as needed. For this example, Write, Tag, Archive, and Collector
security is required, so the groups associated with those functions should be added and defined. There
is no need for Audited Writers and all valid users can read data, so neither the iH Audited Writers Group
nor the iH Readers Group need to be added.
4. Define any individual Tag Level security.
In addition to defining iH Tag Admins that have the power to create, modify, and remove tags, you can
also define individual tag level security to restrict access to sensitive tags. You can grant read, write, or
administrative privileges per tag. For more information on setting Tag Level security, refer to the
Implementing Tag Level Security section.

Setting Up Historian Security Groups

This section describes how to add the Historian Security Groups to your local and domain Windows security
systems.
You can choose whether Historian uses LOCAL or DOMAIN security by selecting an option on the Security
tab of the Data Store Maintenance screen in the Historian Administrator. If you select the local security
option, the groups are defined as local groups on the Historian server. If you select the Domain security
option, the groups are defined as global groups in the primary domain controller of the Historian server.
With domain security, Historian locates the Primary Domain Controller (PDC), if available, or a Backup Domain

104 © 2018 General Electric Company.

 Controller (BDC) in order to establish groups. If the PDC and all BDCs are unavailable, the system locks all
users out until rights can be established with a valid PDC or BDC.

Note: If you change this setting, you must stop and re-start the Historian server for this change to take
effect.

Creating a Local Group on Windows

This procedure applies to Windows 7, Windows 8.1, Windows 10, Windows Server 2008 R2, or Windows
2012 R2.
To create a new local group:

1. Open the Control Panel.

2. Double-click the Administrative Tools.
3. Double-click the Computer Management icon.
The Computer Management console opens.
4. Select Groups from the Local Users and Groups folder in the system tree.
5. From the Action menu, select New Group.
The New Group dialog box appears.
6. Enter the Historian Security Group name in the Group Name field.
For a list of available Historian Security Groups and their functions, see Historian Security Groups on
page 101.

Note: You must enter the Historian Security Group name exactly as it appears. The security groups
are case sensitive.

7. Optionally, enter a description of the Historian Security Group in the Description field.
8. Click Create.
9. Click Close.

Adding Users to Windows Security Group

This procedure applies to Windows 7, Windows 8.1, Windows 10, Windows Server 2008 R2, or Windows
2012 R2.
Before adding users to your group, you must first add your users to the Windows system.
To add a user to a group:

1. Open the Control Panel.

2. Double-click the Administrative Tools.
3. Double-click the Computer Management icon.
The Computer Management console opens.
4. Select Groups from the Local Users and Groups folder in the system tree.
5. Select the group to which you want to add users.
6. From the Action menu, select Properties.
The Users Properties dialog box appears.
7. Click Add.

© 2018 General Electric Company. 105

 8. Select the users or groups to add from the listed users or enter the names of the users or groups you
want to add in the bottom field.
9. Click Add.

Note: To validate the user or group names that you are adding, click Check Names.

10. When you have added all users to the group, click OK.

Adding a Local User

1. Verify object type is Users or Groups.

2. Verify the From This Location setting is your local machine. (Click Locations to specify the local machine,
if required.)
3. Click Advanced.
The Advanced dialog box appears.
4. Click Find Now.
5. From the list of users, select the users or groups to add or enter the names of the users or groups you
want to add in the bottom field.
6. In the Advanced dialog box, click OK.
7. In the Select Users dialog box, click OK.
8. In the Group Properties dialog box, click OK.

Adding a Domain User

1. Verify object type is Users or Groups.

2. Verify the From This Location setting is your Windows domain:
a) Click Locations to specify the domain, if required.
b) Select Entire Directory or the specific domain underneath Entire Directory.
c) Click OK.
3. Click Advanced.
The Advanced dialog box appears.
4. Click Find Now.
5. From the list of users, select the users or groups to add or enter the names of the users or groups you
want to add in the bottom field.
6. In the Advanced dialog box, click OK.
7. In the Select Users dialog box, click OK.
8. In the Group Properties dialog box, click OK.

Using the UAA Config Tool

Use the UAA Config tool to perform the following tasks:
• Add a local UAA user.
Here a local UAA user means a user defined by UAA, not by an external identity provider such as LDAP.
• Remove a local UAA user.

106 © 2018 General Electric Company.

 • Reset the password for a local UAA user.
• Add a local UAA user to an existing UAA group.
Since OAuth2 scopes are implemented as UAA groups, this means the same as adding a scope to a user.
• Remove a local UAA user from an existing UAA group.
A user who performs these functions is acting as the “admin” client and needs to know the secret of the
admin client. The tool does provide a way for the user to cache the secret safely to be used later.
The tool is installed in the UAA subdirectory of the Historian installation directory, typically C:\Program
Files\GE Digital\UAA. Run the tool from a Windows command prompt window.

Syntax
The tool’s syntax follows this format:

uaa_config_tool verb [options]

where verb is one fo the following:

• add_user
• remove_user
• set_user_password
• add_user_to_group
• remove_user_from_group
• clear_secret
Run the tool without a verb or any other options to view the help screen.
Options can be specified in the form of single dash followed by a short name, or double dash followed by
a long name, followed by the value of the option, if any. For example, you can specify the user name Alice
by either

-u Alice

or

--UserName Alice

Options
The options are as follows:

Short name Long name Remark

-t --Target URL of the UAA instance that the command should be performed
on. Typically, the URL is https://localhost:8443/uaa,
which is the default value. This option is optional and is only
needed when the user wants to run the command against a
remote UAA instance (which is not recommended due to security
concerns).
-n --ClientId ID of the client that the user is acting as. By default, it is admin.
This option is optional and is only needed when the admin has
set up the UAA to delegate certain operations to others.

© 2018 General Electric Company. 107

 -s --ClientSecret This is the secret used to authenticate the user for acting as the
admin client (or an alternative client given in a --ClientId
option). If the user has elected to cache the secret previously,
then this option can be omitted. Otherwise, it has to be provided.
-c --CacheSecret This option is not followed by a value and is optional. If specified,
the tool will cache the client secret so when the next time this
tool is invoked the secret does not have to be specified. Note
that the secret is encrypted and only the current Windows logon
user can access and decrypt.
-u --UserName Name of the user that the tool is being invoked for. For example,
the user that is being added or removed.
-p --UserPassword The password for the user being added or whose password is
being reset. The option is only needed for the add_user and
set_user_password commands.
-g --Group Name of the UAA group (scope) that the user is being added to
or removed from. The option is only needed for the add_us
er_to_group and remove_user_from_group commands.

Examples
• To add a new user named bob with the password bobcat2 (with the admin client secret MyNotSoSe
cret specified on the command line, to be cached and used later):

uaa_config_tool add_user -u bob -p bobcat2 -s MyNotSoSecret -c

• To add user bob to the group historian_visualization.user, using the previously cached
admin secret:

uaa_config_tool add_user_to_group -u bob -g historian_visualization.user

• To remove user alice from a remote instance of UAA as an alternative client (that is, other than admin)
useradmin:

uaa_config_tool remove_user -u alice -t https://webhost.lab:8443/uaa -n

useradmin -s MyOtherNonSecret

• To clear any cached client secret:

uaa_config_tool clear_secret

Note: If the Windows logon account is not shared, it is not necessary to clear cached secret, since
the cache is encrypted and only the same Windows user account can decrypt.

Adding a UAA User

These instructions are for adding users and clients to the UAA server after a non-domain or non-LDAP
Historian installation. You must have Internet access on the machine on which you are performing these
steps.

108 © 2018 General Electric Company.

 1. Download the Ruby installer and devkit from http://rubyinstaller.org/downloads/.
2. Run the Ruby installer.
3. Copy the devkit to the Ruby directory and extract the files.
4. Open the Start command prompt with Ruby and change the directory to the Ruby install location.

cd C:\Ruby22

5. Enter the following commands:

>Ruby dk.rb init

>Ruby dk.rb install

>gem install cf-uaac

If your network has a proxy, you may need to add --http-proxy.<yourproxy> to the command
line. For example

>gem install cf-uaac --http-proxy.<yourproxy>

6. Enter the following commands:

>uaac target http://<servername>:8080/uaa

>uaac token client get admin

7. Enter the following command to see all the uaac commands you can use to add, edit, and remove a
client or user.

>uaac help

The user is the actual person, while the client is the application.
8. Add a user:

>uaac user add <username> --emails "email"

You are prompted to add the password for the user. This will add the user you want; you can edit it later
for scope.
9. Add scopes to the newly created user:

>uaac member add historian_visualization.admin <username>

>uaac member add historian_visualization.user <username>
>uaac member add historian_rest_api.read <username>
>uaac member add historian_rest_api.write <username>

About Domain Security Groups

When you configure Historian to use Domain security groups, the Data Archiver attempts to locate the
groups on the Primary Domain Controller (PDC) or one of the Backup Domain Controllers (BDC). If you don't
have a primary domain controller or if it is slow to access, you can have the Data Archiver access the nearest
domain controller via the UseADSICalls registry key. When using a PDC, if a Primary or Backup Domain

© 2018 General Electric Company. 109

 Controller cannot be located when the Historian Data Archiver service starts, access to Historian is denied
to all users.
For troubleshooting, the data archiver show (.SHW) file lists all PDCs and BDCs available at the time of
archiver startup. Use this list to verify that the Historian Server has visibility into the appropriate domain.
When using a PDC, after the list of Domain Controllers has been established, the Historian Server will use
that list to query for Security Group Membership on an as needed basis. If at any time a request for Group
Membership information is made and the Primary Domain Controller is not available, Historian selects the
first Backup Domain Controller and attempts the same request. If a Backup Domain Controller successfully
responds to the request, the process of querying for Group Membership can stop. Otherwise, Historian will
attempt to query Group Membership information from the next available Backup Domain Controller. If no
Backup Domain Controller successfully responds, access to the system is denied.
When using the UseADSICalls registry key, Historian does not connect to a specific domain controller and
lets the operating system contact the most available one.
Changing security group configuration from Local to Domain or vice versa requires that the Historian Data
Archiver service be restarted for the change to take effect.

Creating a Global Security Group in a Windows 2003 Domain

1. In the Control Panel, double-click Administrative Tools.

The Administrative Tools dialog box appears.
2. Double-click the Active Directory Users and Computer icon.
The Active Directory dialog box appears.
3. In the Active Directory Tree display, select the required Domain and select Users.
4. Right-click Users and select New > Group.
The New Object - Group dialog box appears.
5. In the Group name field, enter the name of the new Historian group exactly as you have defined it. Leave
the other default options unchanged.
6. Click OK to create the new group.

Creating a Security Group in a Windows 2008 Domain

1. In the Control Panel, double-click Administrative Tools.

The Administrative Tools dialog box appears.
2. Double-click the Active Directory Users and Computer icon.
The Active Directory dialog box appears.
3. In the Active Directory Tree display, select Users.
4. Right-click Users and select New > Group.
The New Object - Group dialog box appears.
5. In the Group name field, enter the name of the new Historian group exactly as you have defined it. Leave
the other default options unchanged.
6. Click OK to create the new group.

110 © 2018 General Electric Company.

 Using a Windows 2003 Domain Controller with a Windows 2008 Historian Server
When you use domain security with a Windows 2008 Historian Server and the domain controller is a Windows
2003 controller, you must configure the Historian Data Archiver service to log on as a valid domain account
and you must add the user right Act as a Part of the Operating System to its list of rights.

1. Set up the log-on of the Historian data archiver service:

a) In Control Panel > Administrative Tools, double-click Services.
The Services dialog box appears.
b) Double-click Historian Data Archiver.
The Service dialog appears.
c) In the Log On As pane, click This Account and select a domain user account.
d) Click OK.
2. Add the Act As Part of Operating System right to the domain account:
a) In Administrative Tools, double-click Domain Security Policy.
The Default Domain Security Settings dialog box appears.
b) In the Security Settings tree, select User Rights Assessment from Local Policies.
c) Double-click Act as a part of the operating system policy.
d) Select Define these policy settings check box, and click Add User or Group.
The Add Users and Groups dialog box appears.
e) Select your domain user name.
f) Click Add and click OK
g) In Services, restart Historian Data Archiver.
You should now be able to log on to Historian Administrator using Domain Security.
If you attempt to log on to the Historian Data Archiver as a Local System Account, you may be denied
access because the System Account in Windows 2008 is not privileged to access the Windows 2003
Domain Administrator. A valid domain user account, however, is privileged to access the Windows
2003 Domain Administrator if it has also been granted the Act as a Part of the Operating
System right.

Configuring Data Archiver to use Active Directory Service Interface

By default, the Data Archiver tries to enumerate all the available domain controllers during startup. If a
Primary or Backup Domain Controller cannot be located when the Historian Data Archiver service starts,
access to Historian is denied to all users. Also, when you have domain controller machines spread across
a wide area network (WAN), you may find that logins are successful but slow.
With the Active Directory Support feature, you can configure the Data Archiver to use a different set of
Windows calls called Active Directory Services Interface (ADSI) when using Historian security. Configuring
the Data Archiver to use Active Directory Services Interface (ADSI) allows you to:
• Log in to the Historian even if the Data Archiver is unable to enumerate any domain controllers during
the Data Archiver startup.
• Access a Backup Domain Controller if a Primary Domain Controller is not available temporarily or
permanently.
You should configure the Data Archiver to use Active Directory Services Interface (ADSI) only when the Data
Archiver fails to enumerate domain controllers.

© 2018 General Electric Company. 111

 You can determine whether or not the Data Archiver is able to locate a domain controller by viewing the
data archiver.shw log file. In the data archiver.shw log file If "Group Server #01:" is empty, then
the Data Archiver is unable to locate a domain controller.

Security Settings
=================
Group Mode : GLOBAL
Use Client Windows User for Logon : TRUE
Security Domain : <your domain>
Group Server #01 :

The following procedures provide guidelines for configuring the Data Archiver to use Active Directory Services
Interface (ADSI) calls.

Creating a Registry Key and Turning On UseADSICalls

1. On the Start menu, click Run.

For Windows 7, Windows 8.1, Windows Server 2008 R2, and Windows Server 2012 R2, click the Windows
Start button and click inside the Start Search field
2. Type Regedit and click OK.
The Registry Editor dialog box appears.
3. Open the following key folder:
HKEY_LOCAL_MACHINE\SOFTWARE\Intellution,
Inc.\Historian\Services\DataArchiver\
4. Add a new DWORD value:
Enter the name UseADSICalls, and select Base as Decimal.
5. In the Value data field, type 1.
6. Click OK.
7. Close the Registry Editor and configure the Data Archiver service to run as domain administrator.

Configuring Data Archiver to use Active Directory Service Interface

By default, the Data Archiver tries to enumerate all the available domain controllers during startup. If a
Primary or Backup Domain Controller cannot be located when the Historian Data Archiver service starts,
access to Historian is denied to all users. Also, when you have domain controller machines spread across
a wide area network (WAN), you may find that logins are successful but slow.
With the Active Directory Support feature, you can configure the Data Archiver to use a different set of
Windows calls called Active Directory Services Interface (ADSI) when using Historian security. Configuring
the Data Archiver to use Active Directory Services Interface (ADSI) allows you to:
• Log in to the Historian even if the Data Archiver is unable to enumerate any domain controllers during
the Data Archiver startup.
• Access a Backup Domain Controller if a Primary Domain Controller is not available temporarily or
permanently.
You should configure the Data Archiver to use Active Directory Services Interface (ADSI) only when the Data
Archiver fails to enumerate domain controllers.

112 © 2018 General Electric Company.

 You can determine whether or not the Data Archiver is able to locate a domain controller by viewing the
data archiver.shw log file. In the data archiver.shw log file If "Group Server #01:" is empty, then
the Data Archiver is unable to locate a domain controller.

Security Settings
=================
Group Mode : GLOBAL
Use Client Windows User for Logon : TRUE
Security Domain : <your domain>
Group Server #01 :

The following procedures provide guidelines for configuring the Data Archiver to use Active Directory Services
Interface (ADSI) calls.

Restarting the Data Archiver Service

1. On the Start menu, click Run.

For Windows 7, Windows 8.1, Windows Server 2008 R2, and Windows Server 2012 R2, click the Windows
Start button and click inside the Start Search field
2. Type services.msc and click OK.
The Services dialog box appears.
3. Right-click the Historian Data Archiver service and click Restart.

Establishing Your Security Rights

Your security identity is established upon connecting to the server. This occurs through the following steps:

1. Specifying a user name and password of an account.

Upon connection, the system checks to see if you have a valid Windows 2003 account. If you have
supplied a username and password (through the Excel Add-In for example), security checks that user.
If username and password are not supplied and you are on a Windows 2003 or Windows 2008 machine
or higher, security checks the currently logged in user.

Note: If you do not pass a domain name the account will be checked locally in the same way a
mapped drive attempt happens. You have to specify a username and password that exists on the
server.

2. Determining group membership of that account.

Once the account is validated, the server determines group membership. For more information on the
process and hierarchy of the groups, refer to the Security Checking Process diagram below.
3. Caching membership profile.
Once the group and tag membership are determined, it is cached for the connection and not looked up
again. If users are added to or deleted from a group, the cache is not updated.

Note: The cache information is per connection, and not per IP address. In other words, it is cached
per application and not per system.

© 2018 General Electric Company. 113

 Figure 6: Security Checking Process

114 © 2018 General Electric Company.

 Implementing Tag Level Security
In addition to defining the iH Tag Admins who have the power to create, modify, and remove tags, you can
also define individual tag level security to protect sensitive tags.
Set tag level security in the Historian Administrator. You do not need to use the Historian Security Groups
for this security setting. You can use a Windows pre-defined group (power users, for example) or create
your own separate group specifically for this function. For more information on creating and adding groups,
refer to Setting Up Historian Security Groups on page 104.
Users must have iH Security Admins rights to set individual tag level security, browse, or query tags in the
Historian Administrator.

Note: Tag security is not enforced in the Trend Client when it comes to browsing the full list of tags.
Security, however, is enforced when it comes to trending data for tags for which you have permission.
For example, if you are logged into the Trend Client as a user that is a member of the User Group
assigned to a tag's security Read Group, you will still be able to browse all Historian tags. However, you
are only allowed to trend the tags for which the user is a member of the User Group assigned to the
tag's security Read Group,

1. Open the Historian Administrator.

2. Click the Tags link.
The Tag Maintenance screen appears.
3. Select a tag (or group of tags) from the Tag Name section of the Tag Maintenance screen.
4. Click on the Advanced tab to display the advanced tag options.
5. In the Read Group, Write Group, or Administer Group field, select the security group that you wish to
assign to the tag from the drop-down list.
The drop-down list automatically lists all security groups that are defined in your Windows security
environment.
For example, if an iH Security Admins user selects a tag and chooses power users from the Read Group
drop-down list, in addition to members of the iH Security Admins group, only a member of the power
users group will be able to read data for that tag. Even a member of the iH Readers group will not be
able to access data for that tag, unless they are also defined as a member of the power users group.

© 2018 General Electric Company. 115

 Retrieving Data from Historian

About Retrieving Data from Historian

After data collection, the Historian Server compresses and stores the information in a Data Archive or a
*.iha file. Any client application can retrieve archived data through the Historian API. The Historian API is
a client/server programming interface that maintains connectivity to the Historian Server and provides
functions for data storage and retrieval in a distributed network environment.
You can retrieve data from Historian using any number of clients, including but not limited to:
• Historian Analysis
• Knowledge Center
• iFIX
• CIMPLICITY
• Real-Time Information Portal
• Dream Reports
• Excel Add-In
• Custom SDK Applications
• OLE DB
Historian exposes various sampling and calculation modes that are used on retrieval of data that has already
been collected to the archive. These modes do not effect data collection. Some sampling modes are suited
to compressed data and should be used when collector compression or archive compression is used.

Sampling Modes
Sampling modes are used to specify how the data will be retrieved from Historian. Several modes are
available, such as CurrentValue, Interpolated, Calculated and RawByTime. Sampling modes are specified
in the client you use to retrieve data from Historian.
For more information, refer to the Advanced Topics section in the online help.

Sampling Mode Results

CurrentValue Retrieves the most recent data sample value received by the archiver, of any data
quality. This does not necessarily produce the most recent raw data sample, as
archive compression may not have stored the most recent raw sample.
The sample has a time stamp, a value, and a quality. The time stamp returned is not
typically the current time; it is the time stamp as sent by the collector. If you have a
slow poll rate or if collector compression is enabled, the time stamp may be much
earlier than the current time.

RawByTime Returns all raw samples of all qualities with a time stamp greater than a specified
start time, and less than or equal to a specified end time. The RawByTime sampling
mode will not return a sample equal to the start time.

116 © 2018 General Electric Company.

 Sampling Mode Results
RawByNumber Returns a specified number of samples of all qualities with a time stamp greater than
or equal to the start time. The RawByNumber sampling mode will return a sample
with a time stamp equal to the start time if one exists
You must also specify a direction and number of samples when using this sampling
mode.

Interpolated When archive or collector compression is used, a minimal number of actual data
samples are stored in the archive. When this data is retrieved, interpolation can be
performed to create an evenly spaced list of most likely real-world values (since the
actual values have been removed from the archive through the compression
algorithm).
The Interpolated sampling mode is also useful for data samples that haven't
undergone archive compression. For example, you may want to plot data along an
interval that doesn't match the collected raw samples. Using the Interpolated sampling
mode would give you the most likely real-world values for the specified period.
Typically, you use the interpolated sampling mode when data is not collected on a
set time schedule, or if you want to see the results returned in an interval that is
slower than the collection rate. For example, these instances show when you can
use interpolated mode to make evenly spaced values:
• A tag is collected as “unsolicited”. In this case, we do not know what the time
interval is between collected values.
• The dead band or archive compression for a tag results in unevenly spaced
collection intervals.
• A tag is collected once per 8-hour shift, but you want to see it displayed in one
hour intervals with a linear slope between points.

InterpolatedtoRaw When you request interpolated data, you specify an interval or number of samples.
If the actual stored number of raw samples is greater than required, you will get
interpolated data as described above. If the actual number of stored samples are
less than the required, then you will get the raw samples. In this way, the needs of
trending detail and application load are balanced.
This mode is best used when querying compressed data because the Data Archiver
can switch to the more efficient raw data query.

Lab The Lab sampling mode only returns the collected values, without any interpolation
of the value. The collected value is repeated for each interval until there is a change
in the raw data sample's value.
Lab sampling is most often used to create a step chart rather than a smooth curve.
Use Lab sampling instead of interpolated if you only want true collected values
returned. The Lab sampling mode is generally not useful on highly compressed data.
Use interpolated sampling instead.

LabtoRaw LabtoRaw is an extension to Lab mode of sampling and similar to InterpolatedtoRaw

mode where you will be switched to raw data or lab when the actual data samples
are fewer than the requested samples.

© 2018 General Electric Company. 117

 Sampling Mode Results
Trend The Trend sampling mode was designed to produce maximum performance when
retrieving data for plotting, particularly over long time periods.
The trend sampling mode returns the maximum and minimum value collected during
each interval. When plotted, this makes it possible to display an accurate
representation of the data that won’t miss any extrema, by only retrieving a minimum
of points.
For example, a trend of one year of data with a one-day interval will return 730 values
consisting of the 365 minimums and 365 maximums for each day of the year.

TrendtoRaw The TrendtoRaw sampling mode almost always produces the same results as the
Trend sampling mode. The exception is that, when more samples are requested than
there are raw data points, the TrendtoRaw sampling mode returns all of the available
raw data points with no further processing.
TrendtoRaw is used when the number of actual data samples are fewer than the
requested number of samples. In that case, TrendtoRaw retrieves raw data in a given
interval (between a selected raw minimum and raw maximum).

Trend2 The Trend2 sampling mode is a modified version of the Trend sampling mode.
Trend2 sampling splits up a given time period into a number of intervals (using either
a specified number of samples or specified interval length), and returns the minimum
and maximum data values that occur within the range of each interval, together with
the timestamps of the raw values.
The key differences between Trend and Trend2 sampling modes are in:
• How they treat a sampling period that does not evenly divide by the interval
length:
• For the Trend sampling mode, Historian ignores any leftover values at the end,
rather than putting them into a smaller interval.
• For the Trend2 sampling mode, Historian creates as many intervals of the
interval length as will fit into the sampling period, and then creates a remainder
interval from whatever time is left.

• Spacing of timestamps returned:

• For the Trend sampling mode, Historian returns evenly-spaced interval
timestamps.
• For the Trend2 sampling mode, Historian returns raw sample timestamps.
These timestamps can be unevenly spaced, since raw data can be unevenly
spaced.

• Inclusion of start and end times entered:

• The Trend sampling mode is start time exclusive and end time inclusive.
• The Trend2 sampling mode is start time inclusive and end time inclusive.

Trend sampling mode is more suitable for plotting applications that prefer
evenly-spaced data.
Trend2 sampling mode is more suitable for analysis of mins and maxes and for
plotting programs that can handle unevenly spaced data.

118 © 2018 General Electric Company.

 Sampling Mode Results
TrendtoRaw2 The TrendtoRaw2 sampling mode is a modified version of the TrendtoRaw sampling
mode.
The TrendtoRaw2 sampling mode almost always produces the same results as the
Trend2 sampling mode. The exception is that, when more samples are requested
than there are raw data points, the TrendtoRaw2 sampling mode returns all of the
available raw data points with no further processing.

Calculated Returns samples based on a selected Calculation mode. Refer to Calculation Modes
for more information.
RawByFilterToggle RawByFilterToggle returns filtered time ranges. The values returned are 0 and 1. If
the value is 1, then the condition is true and 0 means false.
This sampling mode is used with the time range and filter tag conditions. The result
starts with a starting time stamp and ends with an ending timestamp

Calculation Modes
Calculation modes are used when the sampling mode is set to Calculated. The data type of all calculated
values will be DoubleFloat except for MinimumTime, MaximumTime, FirstRawTime and LastRawTime which
will be a Date. The datatype of the values of FirstRawValue and LastRawValue will be the same as that of
the selected tag.

Calculation Mode Results

Count Displays the number of raw samples in the specified interval. This only indicates the
count and does not display the actual values or qualities of the samples.
The Count calculation mode is useful for analyzing the distribution of raw data
samples. If you have a higher number of raw samples than expected, you may decide
to implement collector or archive compression. If samples are missing, then you may
want to slow your collection rates.

State Count Displays the number of times a tag has transitioned to another state from a previous
state. A state transition is counted when the previous good sample is not equal to
the state value and the next good sample is equal to state value.
State Time Displays the duration that a tag was in a given state within an interval.
Minimum Displays the minimum value in a specified interval with good data quality. This value
may be raw or interpolated.

Note: The Minimum and MinimumTime calculation retrieve two additional

samples per interval; one is interpolated at the interval start time and the other
is interpolated at the interval end time. These samples are used to determine
the min or max just like any raw value.

MinimumTime Displays the time stamp of the minimum value in a specified interval.
See the note in Minimum for additional information.

© 2018 General Electric Company. 119

 Calculation Mode Results
Maximum Displays the maximum value in a specified interval.

Note: The Maximum and MaximumTime calculation internally retrieve two

additional samples per interval; one is interpolated at the interval start time and
the other is interpolated at the interval end time. These samples are used in the
min or max just like any raw or interpolated value.

MaximumTime Displays the time stamp of the maximum value in a specified interval.
See the note in Maximum for additional information.

RawAverage Displays the arithmetic average of the raw values in a specified interval with good
data quality. This is useful only when a sufficient number of raw data values are
collected.
Average Similar to RawAverage, but performs a special logic for time weighting and for
computing the value at the start of the interval. This is useful for computing an average
on compressed data.
OPCQOr and The OPCQOr is a bit wise OR operation of all the 16 bit OPC qualities of the raw samples
OPCQAnd stored in the specified interval.
The OPCQAnd is a bit wise AND operation of all the 16 bit OPC qualities of the raw
samples stored in the specified interval.

Total Retrieves the time-weighted total of raw and interpolated values for each calculation
interval. The collected value must be a rate per 24 hours. This calculation mode
determines a count from the collected rate.
RawTotal Displays the arithmetic sum of raw values in a specified interval.
StandardDeviation Displays the time-weighted standard deviation of raw values for a specified interval.
RawStandardDeviation Displays the arithmetic standard deviation of raw values for a specified interval.
TimeGood Displays the amount of time (in milliseconds) during an interval when the data is of
good quality and matches filter conditions if the filter tag is used.
FirstRawValue Returns the first good raw value for a specified time interval.
FirstRawTime Returns the timestamp of the first good raw for a specified time interval.
LastRawValue Returns the last good raw value for a specified time interval.
LastRawTime Returns the timestamp of the last good raw for a specified time interval.
TagStats Allows you to return multiple calculation modes for a tag in a single query.

Note: You can also use INCLUDEBAD or FILTERINCLUDEBAD as query modifiers to include bad quality
data. For more information, refer INLUDEBAD and FILTERINCLUDEBAD sections in Advanced Topics.

120 © 2018 General Electric Company.

 Query Modifiers
Query Modifiers are used for retrieving data that has been stored in the archive. They are used along with
sampling and calculation modes to get a specific set of data.

Query Modifier Results

ONLYGOOD The ONLYGOOD modifier excludes bad and uncertain data quality values from retrieval
and calculations. Use this modifier with any sampling or calculation mode but it is
most useful with Raw and CurrentValue queries.
All the calculation modes such as minimum or average exclude bad values by default,
so this modifier is not required with those.

INCLUDEREPLACED Normally, when you query raw data from Proficy Historian, any values that have
been replaced with a different value for the same timestamp are not returned. The
INCLUDEREPLACED modifier helps you to indicate that you want replaced values to
be returned, in addition to the currently retrievable data. However, you cannot query
only the replaced data and the retrievable values that have replaced the other values.
You can query all currently visible data and get the data that has been replaced.
This modifier is only useful with rawbytime or rawbynumber retrieval. Do not use it
with any other sampling or calculation mode.

INCLUDEDELETED The INCLUDEDELETED modifier retrieves the value that was previously deleted. Data
that has been deleted from the archiver is never actually removed but is marked as
hidden. Use the INCLUDEDELETED modifier to retrieve the values that were deleted,
in addition to any non-deleted values during the query time period.
This modifier is only useful with rawbytime or rawbynumber retrieval. Do not use it
with any other sampling or calculation mode.

ONLYIFCONNECTED The ONLYIFCONNECTED and ONLYIFUPTODATE modifiers can be used on any sampling
or calculation mode to retrieve bad data if the collector is not currently connected
ONLYIFUPTODATE
and sending data to the archiver. The bad data is not stored in the IHA file but is only
returned in the query. If the collector reconnects and flushes data and you run the
query again, the actual stored data is returned in the following situations:
• Collector loses connection to the archiver
• Collector crashes
• Collector compression is used and no value exceeds the dead band

ONLYRAW The ONLYRAW modifier retrieves only the raw stored samples. It does not add
interpolated or lab sampled values at the beginning of each interval during calculated
retrieval such as average or minimum or maximum.
Normally, a data query for minimum value will interpolate a value at the start of each
interval and use that together with any raw samples to determine the minimum value
in the interval. Interpolation is necessary because some intervals may not have any
raw samples stored.
Use this query modifier with calculation modes only, not with raw or sampled retrieval
like interpolated modes.

© 2018 General Electric Company. 121

 Query Modifier Results
LABSAMPLING The LABSAMPLING modifier affects the calculation modes that interpolate a value at
the start of each interval. Instead of using interpolation, lab sampling is used. When
querying highly compressed data, you may have intervals with no raw samples stored.
An average from 2 PM to 6 PM on a one-hour interval will interpolate a value at 2 PM,
3 PM, 4 PM, and 5 PM and use those in addition to any stored samples to compute
averages. When you specify LABSAMPLING, then lab sampling mode is used instead
of interpolated sampling mode to determine the 2 PM, 3 PM, 4 PM, and 5 PM values.
A lab sampled average would be used when querying a tag that never ramps but
changes in a step pattern such as a state value or setpoint.
Use this query modifier with calculation modes only, not raw or sampled retrieval
like interpolated modes.

ENUMNATIVEVALUE The ENUMNATIVEVALUE modifier retrieves the native, numeric values such as 1 or 2
instead of string values such as on/off for the data that has enumerated states
associated with it.
You can use ENUMNATIVEVALUE with any sampling or calculation mode.

INCLUDEBAD Normally, when you query calculated data from Historian, only good data quality
raw samples are considered. INCLUDEBAD modifier includes bad data quality values
in calculations.
You can use INCLUDEBAD with any sampling or calculation mode.

FILTERINCLUDEBAD Typically, while filtering we use only good data quality values. When we use
FILTERINCLUDEBAD, the bad data quality values are considered when filtering to
determine time ranges.
This query modifier is not always recommended.

USEMASTERFIELDTIME The USEMASTERFIELDTIME query modifier is used only for the MultiField tags. It returns
the value of all the fields at the same timestamp of the master field time, in each
interval returned.
HONORENDTIME Normally, a query keeps searching through archives until the desired number of
samples has been located, or until it gets to the first or last archive. However, there
are cases where you would want to specify a time limit as well. For example, you
may want to output the returned data for a RawByNumber query in a trend screen,
in which case there is no need to return data that would be offscreen.
In cases where you want to specify a time limit, you can do this by specifying an end
time in your RawByNumber query and including the HONORENDTIME query modifier.
Since RawByNumber has direction (backward or forward), the end time must be older
than the start time for a backward direction or newer than the start time for a forward
direction.
Use this query modifier only with the RawByNumber sampling mode.

EXAMINEFEW Queries using calculation modes normally loop through every raw sample, between
the given start time and end time, to compute the calculated values.
When using FirstRawValue, FirstRawTime, LastRawValue, and LastRawTime calculation
modes, we can use only the raw sample near each interval boundary and achieve
the same result. The EXAMINEFEW query modifier enables this. If you are using one

122 © 2018 General Electric Company.

 Query Modifier Results
of these calculation modes, you may experience better read performance using the
EXAMINEFEW query modifier.
Using this query modifier is recommended when:
• The time interval is great than 1 minute.
• The collection interval is greater than 1 second.
• The data node size is greater than the default 1400 bytes.
• The data type of the tags is String or Blob.
Query performance varies depending on all of the above factors.
Use this query modifier only with FirstRawValue, FirstRawTime, LastRawValue, and
LastRawTime calculation modes.

EXCLUDESTALE
Stale tags are tags that have no new data samples within a specified period of time,
and which have the potential to add to system overhead and slow down user queries.
The EXCLUDESTALE query modifier allows for exclusion of stale tags in data queries.
Unless permanently deleted, stale tags from the archiver are not removed but are
simply marked as stale. Use the query without this query modifier to retrieve the
sample values.
Data is not returned for stale tags. An ihSTATUS_STALED_TAG error is returned instead.

Filtered Data Queries

Filtered data queries enhance Historian by adding filter tags and additional filtering criteria to standard
queries. Unfiltered data queries in Historian allow you to specify a start and end time for the query, then
return all data samples within that interval. A filtered data query, however, will allow you to specify a condition
to filter the results by, as well as calculation modes to perform on the returned data. Filtered data queries
are performed on the Historian server.
For example, a filtered data query is useful when trying to retrieve all data for a specific Batch ID, Lot Number,
or Product Code and for filtering data where certain limits were exceeded, such as all data where a
temperature exceeded a certain value. Rather than filtering a full day's worth of process data in the client
application, you can filter data in the Historian archiver, and only return the matching results to the client
application. The result is a smaller, more relevant data set.
You can use filter criteria with raw, interpolated, and calculated sampling modes. You cannot use it with
current value sampling. The logic of selecting intervals is always interpolated, even when the data retrieval
is raw or calculated. The value that triggers a transition from false to true can be a raw value or interpolated
value.
You cannot use a filtered data query in an iFIX chart. For more information, refer to Advanced Topics section
in the online help.

© 2018 General Electric Company. 123

 Filter Parameters for Data Queries
Use of filter parameters with a data query is optional.

Parameter Description
Filter Tag The single tag name used when applying the filter criteria.
You can enter your filter conditions using Filter tag, Filter Comparison Mode, and Filter
Comparison Value or you can put that all that information in a single FilterExpression.

Filter Expression An expression which includes one or more filter conditions. The type of conditions used
are:
• AND Condition
• OR Condition
• Combination of both AND and OR
Filter Expression can be used instead of FilterTag, FilterComparisonMode and FilterValue
parameters. While using FilterExpression, the expression is passed within single quotes
and for complex expressions we write the conditions within a parenthesis. There is no
maximum length for a filter expression, but if it is called using OLEDB or Excel, they may
have their own limitations.

Filter Mode The type of time filter.

The Filter Mode defines how time periods before and after transitions in the filter condition
should be handled.
For example, AfterTime indicates that the filter condition should be True starting at the
timestamp of the archive value that triggered the True condition and leading up to the
timestamp of the archive value that triggered the False condition.
ExactTime Retrieves data for the exact times that the filter condition is True
(only True).

BeforeTime Retrieves data from the time of the last False filter condition up
until the time of the True condition (False until True).

AfterTime Retrieves data from the time of the True filter condition up until
the time of next False condition (True until False).

BeforeAndAfterTime Retrieves data from the time of the last False filter condition up
until the time of next False condition (While True).

Filter Filter Comparison Mode is only used if Filter Tag is filled in.
Comparison
The Filter Comparison Mode defines how archive values for the Filter Tag should be
Mode
compared to the Filter Value to establish the state of the filter condition. If a Filter Tag
and Filter Comparison Value are supplied, time periods are filtered from the results where
the filter condition is False.
The type of comparison to be made on the filter comparison value:

124 © 2018 General Electric Company.

 Parameter Description

Equal Filter condition is True when the Filter Tag is equal to the
comparison value.

EqualFirst Filter condition is True when the Filter Tag is equal to the first
comparison value.

EqualLast Filter condition is True when the Filter Tag is equal to the last
comparison value.

NotEqual Filter condition is True when the Filter Tag is NOT equal to the
comparison value.

LessThan Filter condition is True when the Filter Tag is less than the
comparison value.

GreaterThan Filter condition is True when the Filter Tag is greater than the
comparison value.

LessThanEqual Filter condition is True when the Filter Tag is less than or
equal to the comparison value.

GreaterThanEqual Filter condition is True when the Filter Tag is greater than or
equal to the comparison value.

AllBitsSet Filter condition is True when the binary value of the Filter Tag is equal
to all the bits in the condition. It is represented as ^ to be used in Filter
Expression.

AnyBitSet Filter condition is True when the binary value of the Filter Tag is equal
to any of the bits in the condition. It is represented as ~ to be used in
Filter Expression.

AnyBitNotSet Filter condition is True when the binary value of the Filter Tag is not
equal to any one of the bits in the condition. It is represented as !~
to be used in Filter Expression.

AllBitsNotSet Filter condition is True when the binary value of the Filter Tag is not
equal to all the bits in the condition. It is represented as !^ to be
used in Filter Expression.

Alarm Condition Specifies an alarm condition to filter data by. For

example, Level.

Alarm SubCondition Specifies an alarm sub-condition to filter data by. For

example, HIHI.

Filter Filter Comparison Value is only used if Filter Tag is filled in.
Comparison
The value to compare the filter tag with when applying the appropriate filter to the data
Value
record set query (to determine the appropriate filter times).

© 2018 General Electric Company. 125

 Filtered Queries in the Excel Add-in Example
This example shows how a filtered data query returns specific data from the Historian archive. The example
uses two tags: batchid and ramp. The batchid tag is updated before a new batch is produced with the
new batch's ID. The ramp tag contains raw data sent by a device in the process. In this example, it is
requested that Historian return data samples at ten second intervals for the ramp tag during the period
that the batchid tag is set to B1.
A standard query in Historian for the ramp tag's values between 08:00 and 08:01, at ten second intervals,
would look like this:

Time Stamp Value Data Quality

07/30/2003 08:00:10 16 Good
07/30/2003 08:00:20 22 Good
07/30/2003 08:00:30 34 Good
07/30/2003 08:00:40 46 Good
07/30/2003 08:00:50 50 Good
07/30/2003 08:01:00 55 Good

If we perform a query against the batchid tag for the same time interval, we would receive the following
results:

Time Stamp Value Data Quality

07/30/2003 08:00:00 B0 Good
07/30/2003 08:00:20 B1 Good
07/30/2003 08:00:45 B2 Good

Filtering Data Queries in the Excel Add-in

You can enter your filter conditions using Filter tag, Filter Comparison Mode, and Filter Comparison Value
or you can put that all that information in a single FilterExpression. You can enter the filter conditions in the
FilterExpression field of the Historian Data Query dialog box. The filter conditions are passed within single
quotes.
To find the values of the ramp tag for the B1 batch, enter the following values into the Historian Filtered
Data Query dialog box:

1. In the Tag Name(s) field, enter the tag you want to receive results from - the ramp tag in this example.
2. Select a start and end time for your query.
3. In the Filter Tag field, enter the tag you want to enable filtering with - batchid in this example.
4. In the Filter Comparison field, select your comparison condition.
5. n the Include Data Where Value Is field, enter your filter condition value.
6. In the Include Times field, select your filter mode.
7. In the Sampling Type field, select your sampling mode.

126 © 2018 General Electric Company.

 8. In the Calculation field, select your calculation mode.
9. Select your Sampling Interval.
10. In the Output Display field, select the tag values you want to display.

© 2018 General Electric Company. 127

 UAA LDAP Integration Configuration Tool
The UAA LDAP Integration Configuration Tool is a GUI based tool that helps users easily configure or
reconfigure the various aspects of LDAP integration with UAA after Historian has been installed. In the
following sections, we describe how this tool should be used.
This tool is located under C:\Program Files\GE Digital\UAA\ folder. Find uaa-ldap-config-tool.exe and run it
with the administrator’s privilege (right-click and select Run as Administrator). The first screen should
look similar to the following:

Note that on this screen most of the fields are read-only and meant only for informational purposes. They
identify the URL of the Historian UAA instance to configure, the yml file that this UAA instance uses as the
primary configuration file (and that the tool will modify), and a trust store file that the tool will place a server
certificate into, when the user selects LDAPS protocol and provides a certificate file.
The tool does ask for the secret of the admin client for UAA, if the user wants to view and/or change mappings
from LDAP groups to the pre-defined UAA scopes related to Historian functions. Do note, however, that this
field is optional if the user doesn’t need to view or change the mappings.
Click the Next button to view the next screen, which should be something similar to the following:

128 © 2018 General Electric Company.

 First the user can elect to enable or disable LDAP as an identity provider for UAA by checking or clearing
the checkbox at the top labelled Enable LDAP as an Identity Provider for UAA.
If LDAP integration is enabled as an identity provider for UAA, then the following fields should be
configured/re-configured:

Field Name Remarks

LDAP Server URL URL of the LDAP server, starting with ldap:// or
ldaps://. Note that the port number should be
specified if a non-standard port is used.
Service Account DN Distinguished name of a service account used to
search for users and retrieve users’ group
information.

© 2018 General Electric Company. 129

 Service Account Password Password of the service account. Leave it blank, if it
does not have to be updated.
Search Base Base of the LDAP directory where search begins.
Search Filter Matching criterion used to identify user. It should
match user's input, denoted as {0}, against an LDAP
attribute.

The bottom section only applies when LDAPS (i.e., LDAP on SSL) protocol is used. The fields inside this section
grey out when the protocol specified in the LDAP Server URL field is not LDAPS. Otherwise, the user can
choose between two options:
• • Skip LDAP server’s certificate verification. While still encrypting all communications between UAA
and the LDAP server, this is a less secure option as UAA will not attempt to verify the specified LDAP
server’s identity and thus is vulnerable to identity-spoof attacks. With this option, the user doesn’t
need to provide the LDAP server’s certification if this option is selected. This option is generally useful
during initial provisioning or troubleshooting.
• Enable the use of LDAP server’s SSL certificate to verify its identity. In this case, the user should:
• (i) select a certificate alias, which is solely used for uniquely identifying the certificate in the trust
store file used by UAA, and
• (ii) provide the LDAP server’s certificate in either binary or base 64-encoded form, typically in a
file with extension .cer, .crt,.der, or .pem. Use the […] button to open a dialog box to select the
certificate file.
Later the tool will import the certificate into the trust store used by UAA and configure the UAA
to use this certificate for the purpose of protecting LDAP communications.
IMPORTANT NOTES:
• Selecting and importing the certificate only needs to take place once. When the user re-runs
the tool to reconfigure something else, the alias in step (i) above should remain unchanged,
and step (ii) doesn’t have to be repeated.
• If the user has erroneously selected a certificate file and now wants to cancel the importing,
click the Clear button to clear out the file path displayed.

Once the basic LDAP settings have been provided or updated, the user can click on the Next button to move
onto the next screen, which has the settings related to how the UAA user accounts group member search
is conducted and how LDAP groups map to UAA scopes. It should look similar to the screen below:

130 © 2018 General Electric Company.

 The fields displayed/editable are as follows:

Field Name Remarks

Search Base Specifies the part of the directory tree under which
group searches should be performed.
Search Filter Matching criterion for group membership search for
user.
Max Search Depth How many levels deep nested LDAP groups should
be searched for to determine user’s group
membership.
Search Subtree Whether the sub-tree of the search base in the LDAP
directory should be searched as well.

The bottom section allows the user to view and edit the group mappings from LDAP groups to each of the
pre-defined Historian scopes in UAA. Each row requires the distinguished names of the LDAP groups mapped
to the scope. When there are multiple distinguished names for a scope, separate them by a semicolon.

© 2018 General Electric Company. 131

 Once this screen is populated, the user can click the Commit button to commit all the changes to the system.
A result screen will appear, which should report whether the committing has been successful or not. If for
some reason committing failed, it is possible to click the Prev button to change the settings and commit
again. Otherwise, the user can click the Close button to close the tool.

Note: Usually it requires a restart of the “Historian Embedded Tomcat Container” service for updated
configurations to take effect. Therefore, use Services Control Console to stop and restart the service
once this tool finishes running.

132 © 2018 General Electric Company.

Troubleshooting

Managing Historian Log Files

Use the Historian LogTool to view, generate, or compress log files to use for troubleshooting. Logtool.exe
is located in the historian installation directory, for example: C:\Program Files\Proficy\Proficy
Historian\X64.

1. Go to your installation directory and execute the Logtool.exe file.

The LogTool opens, displaying the View Log tab.

2. Select a component from the left panel to see the available log files, and click View Log.
3. Click Generate Logs to enable or disable the debug logging mode for Historian components:
This tool will enable/Disable the debug mode for Historian components. However, leaving the debug
mode enabled for longer time consume the disk space
1.Select the component
2.Choose enable/disable option
3.Click apply

© 2018 General Electric Company. 133

 a) Select a Historian Component and click Enable or Disable.

Note: Leaving debug mode enabled for a component consumes disk space.

b) Click Apply.
4. Click Gather Logs and click Zip the log files to compress the log files and click Open zip file location to
view the zip files.

134 © 2018 General Electric Company.

 Troubleshooting Historian
Before troubleshooting any performance-related issue, make sure the computer meets the recommended
Hardware Requirements on page 24.

Troubleshooting Strict Authentication Issues

If the Historian Server rejects valid collector or client user credentials while connecting, consider the following
condition:

Time Sync between the Server Time and Domain Controller Time
If a client or collector is attempting to connect to the Historian server with Strict Authentication enabled on
a Kerberos configuration, ensure that the Server time and Domain Controller time match with each other.
Otherwise, the server rejects valid credentials and does not allow the connection.

Troubleshooting Historian Server Components

Changing Service Port Numbers

To change the port number of any of the Configuration Manager, Data Archiver or Diagnostics Manager:

1. From Historian Admin Console, change the Port Number from the Services page.

Note: You cannot update the port number of a service which is already in use in the same machine.

2. Ensure that the changed port numbers are updated in the registry which is located at
HKEY_LOCAL_MACHINE\SOFTWARE\Intellution, Inc.\iHistorian\Services.
If the port number is not updated, you must update it manually.
3. Restart the corresponding service.
For example, if you change the port number of the Data Archiver, then you must restart the Data Archiver
service.

Connecting a Historian Server to a Historian Client through a Firewall

To connect a Historian server to a Historian Client through a firewall from a remote machine, you must
enable port number 443.

Receiving a Collector Configuration Error

If you receive a single ihConfigurationGetProperties[-2] error in the collector.LOG file, the
error most likely occurred as a result of the collector connecting and querying for changes in the tag database
immediately, getting a timeout, and then immediately querying again and succeeding.

User API Programs Not Freeing Up Memory

User API Programs built with anything other than Visual Studio .NET should be modified to call
ihuFreePtr() to free any memory pointers returned by the User API. Do not free these pointers using
free() in your application or you can risk memory corruption. User API does not support Unicode
programming.

© 2018 General Electric Company. 135

 Maximum Buffer Memory Size
You can specify the maximum memory buffer size that an archiver queue can take. By default, memory
buffer size is 100MB.

Troubleshooting a Historian Cluster

You may find these issues with clusters:
• If a Historian resource does not go online initially, make sure you have cluster feature included in your
license.
• If a Historian resource runs for a long period of time and then has an unexpected failover, debug the
log messages of the Data Archiver and the Clusters before taking appropriate actions.

Troubleshooting iFIX and Historian

Running iFIX as a Service with iFIX Workspace Listed in the SCU Task List
Prior to iFIX 5.1, if you have configured iFIX to run as a service, you should not have WORKSPACE.EXE listed
as a configured task in the Task Configuration dialog box of the SCU. If WORKSPACE.EXE is listed as a
configured task, it may lead to unpredictable results. For example, if you are also running Historian, no
servers will appear in the Server Name field of the Configure the Historian Server dialog box and you will
not be able to browse Historian tags in the iFIX Expression Editor.
To rectify this, remove WORKSPACE.EXE from the list of configured tasks in the SCU.

iFIX WorkSpace delay when remote session is lost

If the connection between iFIX and a remote Historian session is lost, you may experience a 90 second delay
in the iFIX Workspace Configuration environment, chart, or Expression Builder when accessing a pen
associated with that Historian session.
In the Run Time Environment, all pens in a chart disappear for 90 seconds when the session to a remote
Historian session is lost, even if they are associated with a local Historian server.

Starting iFIX when a remote Historian session is unavailable

If you are using Historian with iFIX, the iFIX Workspace attempts to connect to the Historian Server when it
starts up. If a remote Historian server is unavailable, it may take one minute or longer for iFIX Workspace
to display for each unavailable server.

Accessing Mission Control when a remote Historian session is lost

If a remote Historian session is lost while you are accessing `the HTC tab of Mission Control in the iFIX
Workspace, the H tab may blank out for a minute or longer.

Accessing tags in the iFIX chart after setting OPC "Collector to Made After Restart"
If you add tags in the Historian Administrator to a Server from an OPC Collector that has Configuration
Changes set to Made After Collector Restart, you will be able to see those tags in the iFIX Expression Builder.
You can add them to a chart, for example, but they have no collected data until you manually stop and
restart the OPC Collector.

136 © 2018 General Electric Company.

 Collecting data in an iFIX chart with Time Assigned By Source
If you are retrieving data in an iFIX Chart from a Historian Server, have set the Time Assigned by field to
Source, and have collectors running behind the Server time, the chart will display a flatline up to the current
time of the local machine.

Note: You must set Time Assigned by field to Source if you have unsolicited tags getting data from an
OPC Collector.

Synchronizing the time on iFIX SCADA Servers and View Clients

To ensure that acknowledgements are not lost or attributed to the wrong alarm, synchronize the clocks on
SCADA servers and iFIX View Client machines. If the clocks are not synchronized, alarms generated on the
SCADA nodes and acknowledged on the iFIX View Client nodes could have significantly different timestamps.
You can synchronize the clocks using the NET TIME command. Refer to the Windows Help system for more
information.
The REST API Reference Manual e-book uses port 8443 in examples and sample code throughout the e-book.
If you copy and paste the sample code from this document, you must change this port number to your
installed port.
If you have a previous install of Historian, and you have installed PHA/PKC 6.0/6.1, you will need to uninstall
and then reinstall Historian.

Troubleshooting OPC Data Collectors

Troubleshooting the OPC UA Data Access (DA) Collector

The OPC UA Data Access (DA) Collector gathers and collects data from any OPC UA 1.0-compliant OPC UA
Server. The OPC UA DA Collector automatically determines the capability of the OPC UA Server to which it
is connected, and supports the appropriate features based on this information.

Note: The OPC UA DA Collector does not connect to a UA server that requires the Username/Password
authentication. This includes the CIMPLICITY UA Server.

Troubleshooting the OPC HDA Collector

The OPC HDA Data Collector collects data from any OPC HDA 1.2 -compliant OPC HDA Server. The OPC HDA
Collector automatically determines the capability of the OPC HDA Server to which it is connected, and
supports the appropriate features based on this information.

Note: GE assumes no responsibility for the ability for the OPC HDA Data Collector to connect to specific
HDA servers.

Troubleshooting Historian 7.0 with PHA/PKC 6.0

Installing PHA/PKC on a machine that has Historian 7.0 or greater will fail due to a port conflict issue. Both
applications use the same default port 8443. You must follow the recommended order of install below to
avoid this error. Installing Historian after PHA/PKC on the same machine will not fail as Historian has the
ability to detect used port and will configure an unused port.
The recommended order of install is:
1. Install PHA/PKC 6.0/6.1.

© 2018 General Electric Company. 137

 2. Install Historian 7.0.

Note: If you are performing an install on a system with no prior install of PHA/PKC or Historian, you
must first install the Historian Alarm and Events Archiver and the Historian Client Tools from the Historian
install media, and then you can install PHA or PKC, and then finally the rest of Historian.

138 © 2018 General Electric Company.