Automatic Tank Gauging (ATG) alarms: how to interpret Veeder-Root, INCON and OPW
How to respond to an ATG alarm without guessing: preserve the exact message, identify its channel and asset, verify configuration, and escalate under the manual, observed risk and site procedure.
Head of Operations
In this article
An automatic tank gauge, or ATG, combines signals from probes and sensors configured for one facility. When an alarm appears, the displayed text is a clue tied to that configuration; it is not a complete diagnosis and should not trigger the same automatic response at every station. A responsible response preserves evidence, identifies the asset and follows the manual and the site safety procedure.
What an ATG may monitor
Depending on the equipment and installed modules, a system may display product level, water, temperature, interstitial or sump sensor status, automatic tests, inventory and communication faults. The EPA page on internal release-detection methods explains the role of ATG systems in release detection. It is a U.S. technical reference, not Panamanian law.
Capabilities vary by console, software, probes, sensors, relays and programming. Veeder-Root TLS-450PLUS, OPW SiteSentinel iSite and Franklin EVO publish resources for specific product families. Do not assume that a label, channel or function behaves the same in a different version.
Five details to preserve before touching the console
- Exact message and code, without paraphrasing.
- Date and time of activation and acknowledgment.
- Associated tank, dispenser, sump or channel.
- Operating state, level, delivery, rain or recent maintenance.
- Available photograph or export and the responder’s name.
Acknowledging an alarm to silence its sound is not the same as resolving it. Clearing the event or restarting the system before preserving it can remove useful evidence and create a false appearance of normal operation.
Classify by signal, not by color
| Signal family | Initial verification | Limit of the conclusion |
|---|---|---|
| Liquid in a sump or interstice | Channel, sensor, location and safe observation | The sensor alone does not identify composition or origin |
| Water in a tank | Reading, configured threshold and independent confirmation | It does not automatically prove phase separation |
| Test or inventory | Conditions, sales, deliveries, missing data and configuration | A statistical alert does not locate a release by itself |
| High product or overfill | Level, transfer and configured capacity | Do not confuse programmed volume with actual capacity |
| Probe, sensor or communication fault | Power, channel, wiring and manual-based diagnosis | Missing data do not equal absence of risk |
Safe initial response
Follow the facility emergency procedure. If there is evidence of released product, vapors, fire, overfill, exposure or another unsafe condition, protect people and activate the site’s emergency and authority channels. For signals without immediate emergency evidence, preserve the event, verify the asset and escalate to competent personnel under the manual. Do not open containment, handle wiring or remove liquid without suitable authorization, isolation and equipment.
A liquid alarm can originate in product, water, a sensor, wiring or configuration. A water alarm requires confirmation of the reading and method. A failed test requires review of conditions and scope. Each hypothesis needs independent evidence before repairs are ordered.
Diagnosis by manufacturer and configuration
Start with the console model and version, and preserve a configuration backup where supported. Identify the card, channel, probe or sensor type and threshold. Find the exact message in the applicable manual. If a sensor is replaced, record part number, programming, functional test and final state; changing hardware without verifying the channel can hide an alarm instead of resolving it.
Our guide to sumps and spill buckets supports containment inspection without confusing water and fuel. The phase-separation guide explains why one water reading does not classify fuel quality.
Log and closeout
Closeout should connect the original event, checks, finding, action, functional test and responsible person. If the cause remains unconfirmed, the accurate status is “under investigation,” accompanied by operating controls. Do not label an event a false alarm merely because it disappeared after a restart.
Include the ATG in the station maintenance program: configuration review, asset labels, sensor status, clock, backups and staff ability to retrieve events. Frequency comes from the manufacturer, criticality, history and applicable requirements, not a universal table.
Frequently asked questions
Should I restart the console when it alarms?
Not as the first response. Preserve the event, identify the channel and follow the manual and site procedure.
Does interstitial liquid mean the inner tank is leaking?
Not necessarily. The signal requires confirmation of the sensor, liquid and entry path; product, water or a circuit fault may be present.
Does Master Services remotely monitor every console?
Only when a service, connectivity and scope are expressly contracted. A console’s presence does not imply remote monitoring.
Application record: responding to an ATG alarm
Before applying this guide to a facility, identify the console, version, channel, sensor and associated asset. Write the decision as a verifiable question: which condition generated the event and which operating control applies while it is confirmed. A recommendation without an asset, question and date is difficult to audit and may continue circulating after the facility has changed.
- Input: original message, configuration, history, inspection and functional test.
- Source: retain the title, issuer, edition or date, link and section used.
- Owner: assign who confirms data, who authorizes action and who verifies closeout.
- Status: use confirmed, pending, not applicable or out of scope; do not fill evidence gaps by assumption.
Retain the version that supported the decision and record differences between the plan and field conditions. If configuration changes, the alarm repeats or new evidence appears, reopen the record instead of reusing the earlier conclusion. This keeps the article a working framework rather than a substitute for the manual, design, risk assessment or responsible authority.
Continue learning in Master University. To review a real case, share the inventory, legible photographs, objective and available documents through our contact page; a responsible technical recommendation begins with scope.