Connections and addresses
A connection describes the link to a device, and each tag address uses that device’s format. The address panel in the tag table builds addresses for you.

Siemens S7
Section titled “Siemens S7”S7-300, S7-400, S7-1200 and S7-1500 PLCs. Port 102, with CPU type, rack and slot settings.
| Address | Meaning |
|---|---|
DB1.DBX0.1 |
Data block bit |
DB1.DBB2, DB1.DBW4, DB1.DBD8 |
Byte, word, double word |
M10.0, MW10 |
Memory |
I0.0 (E0.0) |
Inputs |
QW2 (AW2) |
Outputs |
DB1.STRING10.20 |
STRING[20] at offset 10 |
DB1.WSTRING40.20 |
WSTRING[20] |
DB1.CHAR2, DB1.WCHAR4 |
A single character |
DB1.DTL20, DB1.DT32, DB1.DATE40, DB1.TOD42 |
Date and time, tag type String |
DB1.S5TIME46 |
S5TIME, tag type Int32, value in milliseconds |
Strings and time types are available in data blocks only. The code page for STRING and CHAR is a connection setting, 1251 by default. Times are text in the form yyyy-MM-dd HH:mm:ss.fff.
Modbus TCP
Section titled “Modbus TCP”Port 502, with a Unit ID setting. The connection can be persistent or opened for each poll.
| Notation | Examples |
|---|---|
| Zero-based | CO5, DI0, IR10, HR100, HR100.3 (register bit) |
| Modicon, one-based | 00001, 10001, 30001, 40001, 400001 |
Mitsubishi Melsec
Section titled “Mitsubishi Melsec”MC Protocol, binary 3E frame: Q/L, iQ-R and iQ-F in Q compatibility mode. Default port 5000.
Bit devices: X, Y, M, L, F, V, B, SM, SB, TS, CS. Word devices: D, W, R, ZR, SD, SW, TN, CN. Numbers for X, Y, B, SB, W and SW are hexadecimal. Examples: D100, M0, X1F.
OPC UA
Section titled “OPC UA”A tag address is the server’s NodeId, for example ns=2;s=Line1.Speed. Security is either the most secure policy the server offers (default) or none, for bench use. Certificates are stored in %ProgramData%\Scadora\pki.
Simulator
Section titled “Simulator”| Address | What it does |
|---|---|
SINE(0,100,60) |
Sine: min, max, period in seconds |
RAMP(0,100,30) |
Ramp |
TRIANGLE(-5,5,20) |
Triangle |
SQUARE(10,20,80) |
Square: period, min, max |
RANDOM(15,25) |
Random walk |
MEM:Pump1, MEM:Speed=50 |
Memory cell, optionally with an initial value |
FILL(Pump1,5,2,0,100) |
Filling: cell, rise and fall per second, limits |
DELAY(Valve1,3) |
A cell’s value after a delay |
Internal tags
Section titled “Internal tags”A tag without a connection lives in server memory. The Retain flag keeps its value across restarts.