Night Shift Low-Water Alarm on a Fire-Tube Unit
A 6,000 kg/h fire-tube boiler rated at 10 bar(g) is running at 70% load on a cold winter night. The low-water alarm sounds and the burner trips. The operator sees the gauge glass water level at the bottom of the visible range, but the tri-cock lines are warm and the glass looks cloudy. The feedwater pump discharge pressure reads normal, but the pump has been short-cycling every 90 seconds for the past hour. The boiler has a probe-type low-water cutoff and a separate float chamber low-water fuel cutoff. The site log shows the last blowdown of the float chamber was 6 weeks ago. The operator wants to reset the alarm and restart the burner immediately to avoid a plant trip.
1. Evaluate whether the operator should reset and restart immediately. What evidence in the setup points to a false versus a true low-water condition, and what should be verified before any reset?
Read the worked answer
Do not reset and restart immediately. The burner trip on low water is a protective action, and the first duty is to confirm the actual drum level, not to restore firing.
Evidence for a false indication: the gauge glass is cloudy and the tri-cock lines are warm, which can mean the water connections are partially plugged or the glass is fouled. A cloudy glass can read low while the drum is actually at a safe level. The float chamber has not been blown down for 6 weeks, so sludge or scale on the float or in the chamber can hold the float down and produce a false low-water trip. Short-cycling of the feed pump every 90 seconds suggests the pump is cycling on a level control that is hunting, which can create real level swings.
Evidence for a true low-water condition: the low-water alarm and the burner trip agree, and the pump has been cycling, which could mean the feedwater control is not keeping up or the pump is losing prime.
Before any reset: (1) stop firing and keep the feed pump available; (2) blow down the gauge glass and tri-cocks to prove the glass is clear and the connections are open; (3) compare the glass reading with the probe cutoff and the float chamber; (4) blow down the float chamber and verify the float moves freely; (5) check feed pump suction, strainer, and discharge pressure; (6) only after the level is proven safe and the cause is corrected should the low-water cutoff be reset and the burner relit per the startup procedure.
2. The float chamber is later found to contain scale that jammed the float in the low position. What maintenance and testing program should be put in place to prevent recurrence, and which code or standard requirements apply?
Read the worked answer
The jammed float is a failure of a safety device, so the corrective action is both mechanical and procedural.
Mechanical: open, clean, and inspect the float chamber and float; replace the float if it is dented, corroded, or leaks; verify the chamber is installed with the correct blowdown and drain valves; check that the chamber is not subject to a dead leg where sludge can settle.
Procedural: establish a written blowdown schedule for the float chamber, typically at least once per shift or per the manufacturer's instructions, and record it. Add a monthly (or more frequent, per jurisdiction) test of the low-water fuel cutoff by lowering the water level or using the test connection, and record the result. Test the probe cutoff separately so a single failure does not go unnoticed. Include the gauge glass and tri-cocks in the daily routine.
Code/standard basis: ASME Boiler and Pressure Vessel Code Section I and Section IV, and ASME CSD-1 for controls, require low-water fuel cutoffs and specify testing and maintenance. NFPA 85 covers burner management and safety interlocks for the firing side. Local jurisdictional rules often set the test frequency. The key point is that the device must be tested by actually simulating low water, not just by pressing a reset, and the test must be documented.