Automatic Tank Gauging (ATG) alarms: how to interpret Veeder-Root, INCON and OPW
How to respond to an ATG alarm without guessing: preserve the exact message, identify its channel and asset, verify configuration, and escalate under the manual, observed risk and site procedure.
Selection and technical context

In this article
An automatic tank gauge, or ATG, combines signals from probes and sensors configured for one facility. When an alarm appears, the displayed text is a clue tied to that configuration; it is not a complete diagnosis and should not trigger the same automatic response at every station. A responsible response preserves evidence, identifies the asset and follows the manual and the site safety procedure.
What an ATG may monitor
Depending on the equipment and installed modules, a system may display product level, water, temperature, interstitial or sump sensor status, automatic tests, inventory and communication faults. The EPA page on internal release-detection methods explains the role of ATG systems in release detection. It is a U.S. technical reference, not Panamanian law.
Capabilities vary by console, software, probes, sensors, relays and programming. Veeder-Root TLS-450PLUS, OPW SiteSentinel iSite and Franklin EVO publish resources for specific product families. Do not assume that a label, channel or function behaves the same in a different version.
Five details to preserve before touching the console
- Exact message and code, without paraphrasing.
- Date and time of activation and acknowledgment.
- Associated tank, dispenser, sump or channel.
- Operating state, level, delivery, rain or recent maintenance.
- Available photograph or export and the responder’s name.
Acknowledging an alarm to silence its sound is not the same as resolving it. Clearing the event or restarting the system before preserving it can remove useful evidence and create a false appearance of normal operation.
Classify by signal, not by color
| Signal family | Initial verification | Limit of the conclusion |
|---|---|---|
| Liquid in a sump or interstice | Channel, sensor, location and safe observation | The sensor alone does not identify composition or origin |
| Water in a tank | Reading, configured threshold and independent confirmation | It does not automatically prove phase separation |
| Test or inventory | Conditions, sales, deliveries, missing data and configuration | A statistical alert does not locate a release by itself |
| High product or overfill | Level, transfer and configured capacity | Do not confuse programmed volume with actual capacity |
| Probe, sensor or communication fault | Power, channel, wiring and manual-based diagnosis | Missing data do not equal absence of risk |
Safe initial response
Follow the facility emergency procedure. If there is evidence of released product, vapors, fire, overfill, exposure or another unsafe condition, protect people and activate the site’s emergency and authority channels. For signals without immediate emergency evidence, preserve the event, verify the asset and escalate to competent personnel under the manual. Do not open containment, handle wiring or remove liquid without suitable authorization, isolation and equipment.
A liquid alarm can originate in product, water, a sensor, wiring or configuration. A water alarm requires confirmation of the reading and method. A failed test requires review of conditions and scope. Each hypothesis needs independent evidence before repairs are ordered.
Diagnosis by manufacturer and configuration
Start with the console model and version, and preserve a configuration backup where supported. Identify the card, channel, probe or sensor type and threshold. Find the exact message in the applicable manual. If a sensor is replaced, record part number, programming, functional test and final state; changing hardware without verifying the channel can hide an alarm instead of resolving it.
Our guide to sumps and spill buckets supports containment inspection without confusing water and fuel. The phase-separation guide explains why one water reading does not classify fuel quality.
Log and closeout
Closeout should connect the original event, checks, finding, action, functional test and responsible person. If the cause remains unconfirmed, the accurate status is “under investigation,” accompanied by operating controls. Do not label an event a false alarm merely because it disappeared after a restart.
Include the ATG in the station maintenance program: configuration review, asset labels, sensor status, clock, backups and staff ability to retrieve events. Frequency comes from the manufacturer, criticality, history and applicable requirements, not a universal table.
Frequently asked questions
Should I restart the console when it alarms?
Not as the first response. Preserve the event, identify the channel and follow the manual and site procedure.
Does interstitial liquid mean the inner tank is leaking?
Not necessarily. The signal requires confirmation of the sensor, liquid and entry path; product, water or a circuit fault may be present.
Does Master Services remotely monitor every console?
Only when a service, connectivity and scope are expressly contracted. A console’s presence does not imply remote monitoring.
If the alarm returns
Preserve the new event and reopen the diagnosis. Link completion to the confirmed cause and functional test; if the cause remains unconfirmed, keep the event under investigation with the agreed operating controls.
