SCADA Grid Frequency Anomaly Alerts with n8n APIs

Detect grid frequency anomalies fast—automatically calculate deviation & ROCOF by region and alert operators via n8n APIs

This n8n workflow monitors grid frequency readings every minute (or on-demand), computes frequency deviation and ROCOF per region, classifies severity (Normal, Watch, Warning, Critical), enriches anomalies with recent stability history, and then posts operator alerts and Critical incidents through dedicated APIs.

What this workflow does

• Runs on schedule or manually: executes every minute for continuous SCADA-style monitoring, or starts manually for testing.
• Uses configurable classification inputs: sets API endpoints, region scope (regionId), nominal frequency, and deviation/ROCOF thresholds used to classify events.
• Pulls recent telemetry and settles the batch: fetches grid frequency readings from the telemetry API, then waits briefly to allow the telemetry batch to settle.
• Calculates per-region metrics: computes each region’s frequency deviation, rolling average, and ROCOF (rate-of-change of frequency), then classifies severity.
• Enriches non-Normal events: for Watch / Warning / Critical regions, retrieves the last 6 hours of stability events from the history API to help identify likely cause and recommended actions.
• Notifies operators: sends a structured alert payload to an operator dashboard API.
• Creates incidents for Critical only: opens a grid stability incident in the incident management API only for Critical-tier alerts; otherwise it ends after dashboard notification.

Use cases

• Real-time detection of grid frequency anomalies across multiple regions using SCADA telemetry.
• Operator notification workflows that include recent stability history for better incident triage.
• Automated incident creation when frequency deviation/ROCOF crosses Critical thresholds.

Technical details

• Nodes / logic: Set, Code, Wait, Switch, Sticky Note, HTTP Request.
• API integrations: grid telemetry API + history API (header auth), operator dashboard API + incident management API (basic auth).
• Output behavior: dashboard alerts for Normal/Watch/Warning/Critical; incident management only for Critical events.