A method can include receiving time series data acquired during equipment operations at a plurality of natural resource sites; detecting operational events using the time series data; ranking the operational events; associating each of the operational events with a corresponding operational action; and outputting at least a portion of the ranked operational events, each with its corresponding operational action.