COMPLETE USER GUIDE & MANUAL

How to Work with IndusMesh Enterprise End-to-End

A unified industrial DataOps platform, ISA-95-aligned Unified Namespace (UNS), visual pipeline engine, edge federation fabric, and zero-trust reverse proxy mesh powered by the TunnelMesh Core Transport Engine.

⚡ 1. Platform Architecture & Dual Branding

IndusMesh Enterprise combines modern cloud DataOps capabilities with industrial automation protocols, powered by a low-latency, zero-trust core engine.

🏭

IndusMesh Enterprise

The high-level product platform providing ISA-95 UNS hierarchy, visual pipeline studio, semantic models, data product catalogs, and cross-site edge federation.

⚡

TunnelMesh Core Engine

The underlying high-throughput wire transport engine providing multiplexed TCP/HTTP streams, mTLS encryption, WireGuard fallback, and zero-trust ZTNA ingress.

Industrial Data Lifecycle Flow

From physical PLC registers and sensors on the factory floor to real-time analytics and enterprise lakehouses:

DATA LIFECYCLE ARCHITECTURE
[ OT Field Devices ] ➔ (Modbus / S7 / OPC-UA / Sparkplug B) │ ▼ [ IndusMesh Edge Agent ] (Local buffering, deadband filtering, mTLS encryption) │ ▼ (TunnelMesh Zero-Trust Protocol :4443) [ IndusMesh Central Control Plane & UNS Engine ] │ ┌─────┴──────────────────────────────────────────────────────┐ ▼ ▼ [ Visual Pipeline Studio ] [ ISA-95 UNS Tree ] - Data Transformation - Enterprise/Site/Area - Anomaly Detection - Line/Cell/Asset - Quality Scoring (Good/Bad/Uncertain) - Live State Mirror │ │ ▼ ▼ [ Downstream Sinks ] [ Curated Data Products ] - TimescaleDB / InfluxDB - Governed REST APIs - Kafka / MQTT Sparkplug - OpenAPI Documentation - Snowflake / Databricks - AI Copilot Insights

💻 2. CLI & Edge Agent Installation

Install the dual-branded CLI executable (indusmesh and tunnel) directly from the secure VPS download endpoint without needing GitHub tokens.

Linux / macOS (One-Line Terminal Installer)

BASH / ZSH INSTALLER
curl -fsSL https://indusmesh.net/downloads/install.sh | sh

Windows (PowerShell 64-bit Installer)

POWERSHELL INSTALLER
irm https://indusmesh.net/downloads/install.ps1 | iex

Verifying Installation

TERMINAL VERIFICATION
indusmesh version # or use the backward-compatible alias: tunnel version

🚀 3. 5-Minute Quickstart: Your First Pipeline

  1. Sign In to Dashboard: Navigate to https://indusmesh.net/dashboard/ and sign in using Google OAuth or direct credentials.
  2. Create a Project: Select Projects & Envs from the sidebar to create an environment (e.g., Factory-1-Production).
  3. Pair an Edge Node: In Core Edge ➔ Agents, click Pair New Agent or run indusmesh pair on your edge gateway.
  4. Add an Industrial Connection: Go to Industrial Data ➔ Connections, click Add Connection, and select your protocol (OPC-UA, Modbus, MQTT, or S7).
  5. Build a Visual Pipeline: Open Industrial Data ➔ Pipelines, drag a Source node (your connection), connect a Transform node (e.g. Unit Conversion / Anomaly Filter), and connect to a UNS Sink.
  6. View Live Values: Open the ISA-95-aligned Namespace view to watch real-time tag values stream live across the hierarchy.

🔌 4. Industrial Protocol Ingress Connectors

OPC-UA Ingress & Address Space Browsing

IndusMesh includes a native OPC-UA client supporting Binary TCP, Security Policies (Basic256Sha256, Aes128_Sha256_RsaOaep), User/Password authentication, and Certificate validation.

OPC-UA ENDPOINT CONFIGURATION
Endpoint URL: opc.tcp://192.168.1.100:4840 Security Mode: SignAndEncrypt Security Policy: Basic256Sha256 Root Node: ns=2;s=Device1.Sensors

MQTT Sparkplug B

Production Sparkplug B operational profile supporting protobuf scalar metrics, Primary Host STATE birth gating, edge-node NBIRTH/DBIRTH/NDATA/DDATA/NDEATH publication, inbound DDEATH/NDEATH stale-state handling with bdSeq correlation, strict sequence-gap rejection, historical/transient flags, rebirth throttling, and governed NCMD/DCMD command intents.

  • Group ID: Enterprise geographic or functional division (e.g. Texas_Plant)
  • Edge Node ID: Unique Edge Gateway identifier (e.g. Line1_Gateway)
  • Device ID: Individual asset (e.g. Robotic_Arm_03)

Modbus TCP & RTU

Poll Holding Registers (FC03), Input Registers (FC04), Coils (FC01), and Discrete Inputs (FC02) with configurable polling intervals, byte swap (Big/Little Endian), and IEEE 754 float decoders.

Siemens S7 (S7-300 / S7-400 / S7-1200 / S7-1500)

Direct communication via ISO-on-TCP (Port 102). Read and write directly from DB data blocks (e.g. DB1.DBD0 for Float, DB1.DBX0.0 for Boolean) without installing OPC servers.

🌲 5. ISA-95-aligned Unified Namespace (UNS)

The Unified Namespace represents the single source of truth for all real-time events, operational states, and asset structures in your manufacturing enterprise.

Hierarchy Standard

ISA-95 TOPIC PATH FORMAT
Enterprise / Site / Area / Line / Cell / Asset / [Telemetry | State | Maintenance]

Example Topic: AcmeCorp/Dallas_Plant/Packaging/Line_2/Cartoner_A/Vibration_RMS

⚡ 6. Visual Pipeline Studio

Build real-time streaming ETL pipelines directly in your browser without writing code.

📥

1. Ingress Stages

OPC-UA Subscriptions, MQTT Topics, Modbus Polling, S7 Blocks, HTTP Webhooks.

⚙️

2. Transform Stages

Unit conversions (C ➔ F, RPM ➔ Hz), Math formulas, Deadband filters, Rate-of-change limiters.

📤

3. Egress Sinks

UNS Publishing, Time-series DBs, Sparkplug Brokers, Cloud Lakehouses, Alert Webhooks.

📦 7. Industrial Data Products & REST APIs

Package raw telemetry streams into versioned, schema-validated, SLA-backed Data Products that enterprise IT and analytics teams can consume securely.

CURL EXAMPLE: CONSUMING DATA PRODUCT
curl -H "Authorization: Bearer YOUR_API_TOKEN" \ https://indusmesh.net/api/v1/industrial/data-products/dp_boiler_telemetry/latest

🛠️ 8. CLI Command Cheat Sheet

Command Description Example
indusmesh http <port> Expose a local web service securely via Zero-Trust tunnel indusmesh http 3000 --subdomain plant-ui
indusmesh tcp <port> Expose a local raw TCP service (e.g. Modbus 502 or OPC-UA 4840) indusmesh tcp 4840
indusmesh pair Interactive QR code & token pairing for edge gateways indusmesh pair --agent-id edge-node-01
indusmesh status Display active tunnels, latency, and health telemetry indusmesh status
indusmesh diagnose Run comprehensive network, TLS, and DNS connectivity checks indusmesh diagnose
indusmesh api <METHOD> <PATH> Execute authenticated control plane REST commands from CLI indusmesh api GET /api/v1/endpoints

📱 9. Desktop & Mobile Progressive Web App (PWA)

IndusMesh Enterprise is installable as a standalone application with offline support and zero-latency window switching.

  • Windows / macOS / Linux Chrome & Edge: Click the Install App icon in the address bar to install IndusMesh on your desktop taskbar/dock.
  • iOS (iPhone & iPad Safari): Tap the Share button ➔ Select Add to Home Screen.
  • Android (Chrome): Tap the three-dot menu ➔ Select Install App / Add to Home Screen.

❓ 10. Troubleshooting & Frequently Asked Questions

How do I resolve 401 Unauthorized errors during OAuth or API calls? ▼
Ensure your account email is verified. If using Google OAuth, click 'Continue with Google' to re-authenticate with the updated PKCE tokens. For API tokens, verify the Bearer token in the Authorization: Bearer <TOKEN> header.
Can I run IndusMesh behind a strict industrial OT firewall? ▼
Yes! IndusMesh edge agents only require outbound connections to the control server on port 4443 (TCP/TLS) or port 443 (HTTPS WebSockets fallback). No inbound ports need to be opened in your OT firewall.
What is the difference between indusmesh and tunnel commands? ▼
They are identical! indusmesh is the primary Enterprise CLI, and tunnel is provided as a seamless alias for complete backward compatibility with existing automated scripts and Docker containers.
How do I monitor edge fleet health and Dead-Letter Queues (DLQ)? ▼
Visit Industrial Data ➔ Edge Fleet Operations to view live heartbeat latencies, firmware versions, and OTA rollouts. In Pipelines, check the Dead-Letter Queue tab to inspect and replay any unhandled messages.