In methods and systems that may facilitate detecting abnormal operation in a process plant, values of a process variable are analyzed to determine whether they significantly deviate from expected values. If there is a significant deviation, an indicator may be generated. Analyzing the process variable may include, for example, determining whether a number of values of the process variable are increasingly deviating from expected values, or determining whether the process variable is cycling. Analyzing the process variable may also include, for example, processing and analyzing the process variable to determine whether the process is in a normal state, one or more abnormal states, or an indeterminate state.