The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / apache-httpd / apache-httpd-busyworkers-idleworkers ▌

Operations Guides

Apache BusyWorkers and IdleWorkers: reading worker utilization from mod_status

BusyWorkers and IdleWorkers are the two most-quoted numbers from Apache’s mod_status output, and the two most frequently misread. Together they are the primary saturation gauge for the server: how much of the worker pool is currently occupied. Read them wrong and you either miss the onset of worker exhaustion or page someone for healthy autoscaling churn.

This guide covers what the two counters actually count, how to turn them into a utilization ratio you can alert on, why Apache degrades at a cliff edge rather than gradually, and how to distinguish the two very different situations that both show IdleWorkers: 0.

It assumes Apache 2.4.x with mod_status enabled. The ?auto counters are always present in the machine-readable output; ExtendedStatus On adds per-request detail to the full HTML status page. Its base default is Off, but loading mod_status changes the default to On. Everything here applies across the prefork, worker, and event MPMs, with MPM-specific differences called out where they matter.

What the two counters actually count

Apache tracks every worker slot in a shared-memory structure called the scoreboard. Each slot is in one of a small set of states: waiting for a connection (_), starting up (S), reading a request (R), sending a reply (W), keepalive read (K), DNS lookup (D), closing (C), logging (L), gracefully finishing (G), idle cleanup (I), or open slot with no process (.). mod_status reads the scoreboard and summarizes it.

The two summary counters are:

  • BusyWorkers: active request-processing slots—reading (R), writing (W), keepalive (K), DNS lookup (D), closing (C), and logging (L). Starting (S), gracefully finishing (G), idle-cleanup (I), and open/dead (.) slots are excluded.
  • GracefulWorkers: slots in G, reported separately from BusyWorkers.
  • IdleWorkers: ready slots in _ from the current MPM generation.

Two consequences follow.

First, “busy” is broader than “serving a request right now.” A worker blocked writing an access log line or stuck in a DNS lookup inflates BusyWorkers; draining workers appear in GracefulWorkers and scoreboard G, not BusyWorkers. When BusyWorkers climbs, the scoreboard state distribution is how you find out which kind of busy you have.

Second, G, I, and open slots (.) are in neither BusyWorkers nor IdleWorkers; BusyWorkers + IdleWorkers therefore does not include draining or cleanup workers. The spawned-worker count can be below the configured maximum because Apache scales the pool between its spare-worker thresholds.

Reading utilization from mod_status

The machine-readable endpoint is http://localhost/server-status?auto:

# Pull the worker counters
curl -s http://localhost/server-status?auto | grep -E "BusyWorkers|IdleWorkers"

Typical output:

BusyWorkers: 47
IdleWorkers: 18

Two ratios are worth computing, and they answer different questions.

Pool utilization: BusyWorkers / (BusyWorkers + IdleWorkers) tells you how much of the currently spawned pool is occupied. This is what moves second to second and what you watch for saturation onset.

# Compute pool utilization from mod_status
curl -s http://localhost/server-status?auto | \
  awk -F': ' '/^BusyWorkers:/{b=$2} /^IdleWorkers:/{i=$2} END {
    if (b+i > 0) printf "pool utilization: %.1f%% (%d busy, %d idle)\n", b/(b+i)*100, b, i
  }'

Utilization against the ceiling: BusyWorkers / MaxRequestWorkers tells you how close you are to the hard limit. This is the number that predicts queuing. The catch, covered below, is that mod_status does not expose MaxRequestWorkers, so you have to supply it from the MPM configuration yourself.

A single snapshot is a point in time. Both ratios fluctuate with traffic bursts and with Apache’s own child management. Trends and sustained values are what matter; a one-second spike to high utilization that recovers is normal burst absorption.

The cliff edge: why 100% busy means instant queuing

Worker capacity in Apache does not degrade gracefully. Up to full utilization, requests are served normally. The moment every worker is occupied, new connections go to the kernel’s TCP listen backlog. When the backlog fills (default ListenBacklog is 511), new connections are refused outright.

So the degradation curve is a cliff: normal service, then queuing, then connection refusal, with almost no middle ground. The practical implications:

  • Latency dashboards look fine until they don’t. Queued connections show up as client-side connect timeouts, not as slow responses in your access log, because queued requests never reach a worker to be logged.
  • The listen backlog is the only buffer. Watch Recv-Q on the listening sockets; it is the earliest visible symptom of saturation, appearing before users see failures:
# Check listen backlog depth on Apache's sockets
ss -ltn | grep -E ':80\s|:443\s'
  • Alerting on “latency is up” will page you late. Alerting on worker utilization approaching the ceiling, corroborated by backlog depth, pages you early.

Reading IdleWorkers = 0

Zero idle workers is the most alarming-looking value in the output, and it has two completely different causes. Telling them apart requires exactly one piece of outside information: MaxRequestWorkers.

flowchart TD
    A[IdleWorkers = 0] --> B{BusyWorkers near MaxRequestWorkers?}
    B -->|Yes| C[True saturation]
    B -->|No| D[Ramp lag]
    C --> E[Check Recv-Q, MPM worker-limit code, 503s]
    D --> F[Check MinSpareServers or MinSpareThreads]
    E --> G[Page: raise capacity or find what holds workers]
    F --> H[Tune spare minimums, not a capacity problem]

True saturation: IdleWorkers = 0 with BusyWorkers at or near MaxRequestWorkers. Every slot is occupied and Apache cannot spawn more. New connections queue in the listen backlog. This is the cliff edge, and it is page-worthy when sustained. Corroborate with a non-zero Recv-Q, the MPM worker-limit code in the error log (for example AH00484), or 503 responses appearing.

Ramp lag: IdleWorkers = 0 with BusyWorkers well below MaxRequestWorkers. Apache still has room to grow but has not spawned workers fast enough to keep a spare ready. Arriving requests wait for a worker to be created. This is not a capacity problem; it means MinSpareServers (prefork) or MinSpareThreads (worker/event) is too low for your ramp rate. The fix is tuning the spare minimums, not raising the ceiling.

Both produce user-visible latency. Only the first is fixed by raising MaxRequestWorkers. If you raise the ceiling in response to ramp lag, you add memory pressure without fixing the spawn rate.

One more case to keep separate: IdleWorkers fluctuating rapidly between zero and small positive values during traffic bursts is healthy autoscaling. Apache creates and destroys workers between its MinSpare and MaxSpare thresholds, and the count oscillates. Brief dips to zero that recover within seconds are normal; sustained zero is the signal.

What mod_status does not tell you

mod_status is a point-in-time snapshot of the scoreboard, and several things you need for correct interpretation live outside it:

  • MaxRequestWorkers is not exposed. Read it from the MPM configuration (mpm_event.conf, mpm_worker.conf, or mpm_prefork.conf depending on MPM and distribution). There is no way to compute ceiling utilization from mod_status output alone.
  • ServerLimit can silently cap the real maximum. If your MaxRequestWorkers would require more child processes than ServerLimit allows, Apache reduces it and logs a warning at startup. The ceiling you configured may not be the ceiling you have.
  • The numbers lie during graceful restarts. Old-generation children linger while finishing requests, so the spawned worker count can temporarily exceed MaxRequestWorkers, while GracefulWorkers and scoreboard G states identify that overlap. Do not alert on snapshots taken during a restart window.
  • BusyWorkers has no sub-state detail. A worker in W could be writing to a client, waiting on a backend, or processing. The scoreboard line breaks this down:
# Summarize the scoreboard by state
curl -s http://localhost/server-status?auto | grep "Scoreboard:" | \
  awk '{print $2}' | fold -w1 | sort | uniq -c | sort -nr

On the event MPM, keepalive connections are normally handled by the listener thread and tracked in ConnsAsyncKeepAlive, so idle keepalives do not hold worker slots. A high sustained K count on event is worth investigating, especially for connection filters incompatible with event. On prefork and worker MPMs, K states consume real worker slots, and a high count means keepalive connections are hoarding capacity.

Thresholds that work in production

These thresholds are layered so that only corroborated saturation pages anyone.

  • Headroom target: keep at least 25% of the pool idle at your highest normal traffic period. Below that, a routine burst can push you to the cliff.
  • Ticket threshold: sustained utilization above 80% of MaxRequestWorkers for more than 10 minutes. Headroom is thin; investigate before it becomes an incident.
  • Page criteria: all of the following, sustained for more than 2 minutes: BusyWorkers/MaxRequestWorkers above 0.95, IdleWorkers at 0, ServerUptimeSeconds above 600 (filters out cold-start churn), and at least one corroborating signal: Recv-Q above 0 sustained, the MPM worker-limit code in the error log, or 503 responses appearing.

The corroboration requirement matters. A ratio alone can be fooled by a graceful restart, a spawn burst, or a snapshot artifact. A full worker pool plus a growing kernel backlog or an explicit MaxRequestWorkers message is unambiguous.

For capacity planning, plot peak BusyWorkers day over day. If the peaks trend toward the ceiling, extrapolate the intersection date. If peaks correlate with backend response time rather than request rate, fixing the backend buys more headroom than raising the limit.

Signals to correlate with worker utilization

SignalWhy it mattersWarning sign
Scoreboard state distributionTells you what busy workers are doingOne state (W, R, K, L, G) dominating the pool
Listen backlog Recv-QEarliest symptom of saturation, before user-visible failureSustained non-zero during normal traffic
MPM worker-limit codeApache explicitly reporting MaxRequestWorkers reached (for example AH00484)Any occurrence during production traffic
5xx rate, 503 specificallyUser-visible result of worker or proxy pool exhaustionAny sustained rate above 1%
Request rate (Total Accesses delta)Dropping completions with rising BusyWorkers means workers are held, not overloaded with demandRate falls while utilization climbs
Per-child RSSRaising MaxRequestWorkers without memory headroom causes swap and OOMMaxRequestWorkers x avg RSS approaching 70% of RAM
ConnsAsyncKeepAlive (event MPM)Separates idle keepalive load from real worker load on event MPMConfusing async keepalives with worker consumption

The combination of high BusyWorkers with a normal request rate is the classic slow-backend cascade: workers are stuck waiting on a proxied backend, not serving traffic. Check backend health before touching Apache’s limits.

How Netdata helps

  • Netdata collects the mod_status counters continuously, turning point-in-time BusyWorkers and IdleWorkers snapshots into a time series so you can see sustained saturation versus momentary burst absorption.
  • Pool utilization is charted as a ratio, so you can watch the approach to the ceiling instead of reacting after connections start queuing.
  • Scoreboard state distribution is tracked per state over time, which is how you distinguish “busy waiting on a backend” from “busy serving clients” without shell access during an incident.
  • Correlating worker utilization with request completion rate, 5xx responses, and listen socket metrics on one dashboard shortens the path from “utilization is high” to the actual cause.
  • Uptime tracking alongside utilization filters out cold-start noise, matching the uptime gate in the page criteria above.

Netdata’s Apache HTTP Server monitoring with Netdata brings these signals together with per-second metrics and ML anomaly detection.

The Netdata solution

Apache HTTP Server monitoring with Netdata

Netdata monitors Apache HTTP Server with per-second metrics from mod_status, pre-built dashboards, and ML-powered anomaly detection. Watch busy versus idle workers and the scoreboard state mix, requests per second, bytes served per second, and request processing duration alongside the rest of your stack, so you catch the worker-exhaustion, slow-backend, and memory incidents in these runbooks before they page anyone.