Low-Water Trip, Water Added to a Hot Boiler, and a Manager Who Wants to Keep It On Line
At 02:10 a 400-hp, 150 psig firetube boiler firing at 70 % tripped on low water. The operator acknowledged the alarm, could not see a level in the gauge glass, decided the glass was 'just reading low,' and opened the feedwater bypass to fill the boiler while it was still hot. Eight minutes later the boiler began making loud popping and rumbling sounds, and a small leak appeared at the rear tube sheet. The operator reset the low-water cutoff and tried to restart the burner; it lit and then tripped again. The plant manager asks whether the boiler can run at reduced fire until the weekend, because the plant needs steam and 'the cutoff obviously works - it tripped.'
1. Was adding feedwater the right action? Describe the correct sequence after a low-water trip on a hot boiler.
Read the worked answer
No - adding water was the most dangerous thing the operator could have done. Once the level is out of sight you cannot know whether the crown sheet or tube sheet has been uncovered and overheated. Cold feedwater hitting overheated metal causes rapid contraction: cracking, seam or tube-roll failure, and a sudden surge of steam that can rupture the shell. The popping and the new tube-sheet leak are consistent with exactly that damage.
Correct sequence:
- Confirm the fuel is shut off and lock out the burner; do not reset anything.
- Do not add water until the boiler has cooled slowly - typically several hours - unless the level is still visible and the trip was clearly a false one.
- After cooling, inspect for overheated or sagged tubes, a distorted crown sheet or tube sheet, scale blisters, and any leakage; then refill, hydro test, and have the authorized inspector look at it before return to service.
- Investigate why the level was lost: feed pump, feedwater regulator, DA level, sudden load change, or a blocked water column.
The operator's second mistake was attempting a restart on a boiler with a known pressure-boundary leak.
2. How do you determine whether the gauge glass and low-water cutoff were telling the truth, and how should the cutoff be tested routinely?
Read the worked answer
Gauge glass verification:
- Open the glass drain/blowdown and confirm it empties, then closes and refills promptly with a slightly turbulent level.
- Compare against the try-cocks or a second independent level indicator.
- Check the water column and float chamber for closed isolation valves (a classic cause of a false empty or false full glass), plugged top and bottom connections, and sludge build-up.
- A glass that stays full when the drain is open has a plugged lower connection; a glass that stays empty may have a plugged upper connection - either way it is lying.
LWCO functional test ('bump test'):
- With the boiler on low fire under supervision, open the cutoff's drain and confirm the burner shuts down within the manufacturer's stated time (allowing the built-in time delay, typically 10–30 seconds).
- Confirm the device requires a manual reset and that the reset will not latch while the chamber is still low.
- Close the drain, allow the chamber to refill, reset, and verify normal firing.
- Perform this on the frequency set by your written program and the jurisdiction - commonly daily or per shift on automatic boilers - and log every test with initials and time.
A trip proves the switch moved once. It does not prove the chamber is clean, the reset works, or that the device will trip at the correct level tomorrow.
3. Respond to the plant manager's request to run at reduced fire until the weekend.
Read the worked answer
Refuse, and put it in writing. Three separate reasons:
- The boiler has been damaged. A pressure-boundary leak at the rear tube sheet plus a suspected dry-fire is an unsafe condition. Operating a boiler with a known leak through a pressure part is prohibited and is a condition that most insurers exclude immediately.
- The LWCO is not proven. It tripped under conditions nobody has explained, then was reset on a boiler that was already damaged. It must be repaired or replaced as needed, re-tested, and documented before the boiler returns to service.
- Reduced fire does not reduce the risk. Overheated or cracked metal does not care about firing rate; a crack can propagate at any load, and the leak will get worse as the boiler cycles.
Actions:
- Take the boiler out of service, lock and tag the fuel valve and the burner switch, and record the time and reason.
- Cool slowly, drain as required, and inspect internally and externally.
- Any repair to pressure-retaining parts must be made by a holder of the appropriate repair stamp, with authorized inspector and jurisdictional notification as required.
- Hydro test and obtain approval before return to service, and re-test the LWCO and the gauge glass as part of the start-up checks.
Bypassing or 'working around' a low-water cutoff is one of the most common precursors to a catastrophic boiler failure, and it is the operator's license and the manager's signature that carry the liability.