The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / lvm / lvm-commands-hang-lvs-vgs-pvs ▌

Operations Guides

LVM commands hang: when lvs, vgs, and pvs block on locks or dead devices

You type lvs on a host during an incident and the prompt never comes back. Ctrl-C does nothing. kill -9 from another shell does nothing. The process is in D state, uninterruptible sleep, waiting on storage I/O or a metadata lock. Now vgs and pvs hang too, and your monitoring agent, which polls lvs every 60 seconds, has gone silent on exactly the host that is on fire.

This is not a bug in LVM. lvs, vgs, pvs, and every other LVM command acquire a VG lock and then read metadata from the header of every PV in the group. If the lock is held by a stuck operation, or if any PV is slow, dead, or behind a suspended device-mapper target, the command blocks. On a system with many PVs, a slow SAN, or one unresponsive device, “blocks” can mean minutes, or forever.

The dangerous part is the observability gap. The conditions that hang LVM commands (lock contention, dead devices, full thin pools queuing I/O, suspended dm devices) are precisely the conditions you need to observe during an incident. If your diagnostics and your monitoring both depend on the LVM management plane, you are blind at the worst moment. This article covers why the commands hang, how to tell lock waits from device waits, and how to keep diagnosing with dmsetup, which reads kernel memory directly and takes no LVM lock.

What this means

LVM is a userspace management layer over the kernel’s device-mapper subsystem. There are two planes:

  • Management plane: lvs, vgs, pvs, lvchange, and friends. They open lock files under /run/lock/lvm/, serialize on the VG lock, and read metadata from PV headers on disk. They do real I/O.
  • Kernel plane: device-mapper tables already loaded in kernel memory. dmsetup status, dmsetup info, and dmsetup ls query this directly. No LVM lock, no metadata I/O to PVs.

When the management plane hangs, the kernel plane is usually still responsive. That asymmetry is your escape hatch.

Two distinct hang mechanisms get conflated:

  1. Lock waits. Another LVM process (a long pvmove, an lvconvert, a monitoring script, an automated snapshot job) holds the VG lock. Your command queues behind it. Devices are fine; the lock is not.
  2. Device waits. The command got its lock and is now doing I/O to read PV metadata, and one device is unresponsive: a dead SAN LUN, a multipath device with all paths failed, a suspended dm device, or a thin pool that has run out of space and is queuing I/O under a queue_if_no_space policy. The process sits in D state and cannot be killed.
flowchart TD
  A[lvs / vgs / pvs invoked] --> B{VG lock free?}
  B -- no --> C[Queue behind lock holder
pvmove, lvconvert, other lvm procs] B -- yes --> D[Read metadata from every PV header] D --> E{All PVs responsive?} E -- no --> F[D state on dead/slow device
SAN loss, suspended dm, full thin pool] E -- yes --> G[Command returns] C --> F H[dmsetup status / info] --> I[Reads kernel dm tables
no lock, no PV I/O] I --> G

Common causes

CauseWhat it looks likeFirst thing to check
Long LVM operation holding the VG locklvs/vgs hang, but storage I/O to LVs still works; a pvmove or lvconvert is runningps aux for running lvm/pvmove/lvconvert processes; fuser /run/lock/lvm/*
Monitoring/automation stampedeMany lvs/vgs processes piled up, all waiting; lock files present under /run/lock/lvm/ps aux | grep -E 'lvs|vgs|pvs'; count of queued LVM processes
Dead or unresponsive PV (disk, SAN, cable)LVM commands hang in D state; dmesg shows I/O errors; pvs (if it ever returns) shows [unknown]dmesg | tail -50; /sys/class/block/*/device/state
Multipath device with all paths downEvery command touching the VG hangs; workloads on the same device also stallmultipath -ll for failed paths
Suspended dm deviceI/O to one LV frozen; commands scanning it hang; processes pile up in D statedmsetup info -c -o name,suspended
Thin pool full with queue_if_no_spaceAll writes to thin LVs hang; LVM commands hang; D-state count growsdmsetup status --target thin-pool (not lvs)
Slow device scan at large scaleCommands take tens of seconds but eventually return; many PVs or SAN LUNstime pvs --noheadings; block device count
Stale lock fileEverything LVM-related hangs even though no LVM process existsls -la /run/lock/lvm/; compare lock holder PID against ps

Quick checks

Run these from a second session. All are read-only.

# 1. Is anything holding an LVM lock right now?
ps aux | grep -E 'lvm|pvs|vgs|lvs|lvcreate|lvextend|pvmove|lvconvert' | grep -v grep

# 2. Who owns the lock files?
ls -la /run/lock/lvm/
fuser /run/lock/lvm/* 2>/dev/null

# 3. Are processes stuck in D state (device wait rather than lock wait)?
ps -eo pid,stat,wchan:30,comm | grep ' D'

# 4. Does dmsetup still work? (It should. No LVM lock, no PV I/O.)
dmsetup ls
dmsetup info -c -o name,suspended

# 5. Is any dm device suspended?
dmsetup info -c --noheadings -o name,suspended

# 6. Thin pool state straight from the kernel
dmsetup status --target thin-pool

# 7. Kernel evidence of a dying device
dmesg | grep -iE 'I/O error|offline|not ready' | tail -50

# 8. Multipath health, if applicable
multipath -ll

# 9. How slow is a minimal LVM query when it does complete?
time pvs --noheadings

The fork in the road is check 3 versus check 1: if ps shows your hung lvs in D state with an I/O wait channel, you have a device problem. If it is sleeping on a lock file, you have a lock problem.

How to diagnose it

  1. Confirm dmsetup works. Run dmsetup ls and dmsetup info -c. If these return instantly, the kernel side of LVM is healthy and your problem is in the management plane: locks or PV metadata I/O. If dmsetup also hangs, suspect the block layer or a kernel-level dm issue, not LVM locking.

  2. Classify the hang: lock or device. List all LVM-related processes and their states. A hung lvs sleeping on a file lock points at another LVM process as the blocker. A hung lvs in D state points at device I/O. Check fuser /run/lock/lvm/* and match the PID to a live process. If the lock-holder PID does not exist, you may have a stale lock file (see Fixes).

  3. If lock contention: identify the holder. The most common legitimate long holder is pvmove, which can run for hours on large volumes while holding serialization. lvconvert operations (mirror sync, cache conversion) on slow storage behave the same way. Check lvs -o lv_name,copy_percent from a working shell if you can get one, or find the operation in the process list. Also check for automation: snapshot scripts, backup jobs, and your own monitoring agent polling lvs every few seconds all take the same locks and can queue into a stampede.

  4. If device wait: find the offending device. Correlate three sources: dmesg for I/O errors naming a specific sd*/nvme* device, multipath -ll for path failures, and dmsetup info -c -o name,suspended for a suspended target. A multipath device that has lost all paths with queuing enabled will block every I/O, including LVM metadata reads, indefinitely.

  5. Check thin pools explicitly. dmsetup status --target thin-pool shows used_data/total_data and used_meta/total_meta. If data blocks are exhausted and the pool queues I/O on full, all writes to thin LVs queue in the kernel. Processes go to D state, and LVM commands that need I/O on those devices hang too. This is the thin pool death spiral, and it is why you reach for dmsetup status over lvs during incidents: lvs may itself need I/O to the hung storage. The kernel dm-thin module queues writes for up to 60 seconds by default when the pool is full (configurable via the no_space_timeout module parameter); after that, queued writes fail.

  6. Rule out scale. If commands complete but take 10 to 60 seconds, count your block devices. LVM scans devices to find PVs, and on hosts with hundreds of SAN LUNs or multipath paths, the scan itself is the delay. This is degraded, not broken, but the fix (device filtering) differs from the fixes for locks and dead devices. On RHEL 9 the devices file is enabled by default, and LVM only scans devices listed in it, so a dead device not in the file is not scanned at all.

Metrics and signals to monitor

SignalWhy it mattersWarning sign
LVM command execution time (time pvs)Direct measure of management-plane health; degrades before total hangs> 5 seconds consistently; > 30 seconds is effectively broken
D-state process count on dm devicesUser-visible symptom of device waits; growth means the incident is escalatingAny process in D > 120 s, or a rising count
dm suspended state (dmsetup info -c)A suspended target freezes all I/O to that LVSuspended for > 5 minutes with no approved operation in progress
Thin pool data/metadata percent (dmsetup status)Pool exhaustion with queuing hangs I/O rather than erroringdata_percent > 95%, metadata_percent > 90%
LVM lock file age in /run/lock/lvm/A lock held for minutes means a stuck or long-running operationLock held > 60 s outside a known pvmove/lvconvert
Kernel block I/O errors (dmesg)The usual root cause of device waitsAny new I/O error, offline, or path-failure lines
Missing PVs (pvs showing [unknown])A vanished PV both breaks LVs and slows/hangs future scansAny PV missing with uptime > 600 s

Fixes

Lock contention from a legitimate long operation

If the holder is a real pvmove or lvconvert, your options are to wait or to unwind cleanly. For pvmove, use pvmove --abort; never kill -9 a pvmove, since an interrupted migration leaves the LV in a temporary mirror state (lv_attr position 1 shows p) that you then have to complete or abort anyway. While the operation runs, use dmsetup for any diagnostics you need.

Automation and monitoring stampede

Reduce LVM polling frequency, serialize your scripts so only one runs at a time, and move high-frequency collection to dmsetup status, which takes no lock. A monitoring agent that shells out to lvs every 10 seconds takes the VG lock six times a minute and is part of the contention it reports on.

Stale lock files

If fuser shows a lock file held by a PID that no longer exists, a killed LVM process left it behind. Removing the lock file can unblock everything, but verify with ps that no LVM process is alive and mid-operation before deleting anything. Deleting a lock file under a live operation risks metadata corruption.

Dead or unresponsive device

Work the layer below LVM. For SAN, verify LUN presentation and rescan: echo '- - -' > /sys/class/scsi_host/host*/scan. For multipath, multipath -ll tells you whether all paths failed; a map with queuing enabled and no live paths blocks I/O indefinitely, and clearing or reconfiguring the map is the unblock. For a truly dead local disk, the PV is gone; see the missing-PV guide for the recovery path. Do not run vgreduce --removemissing until you have assessed which LVs lose data.

Suspended dm device

dmsetup resume <vg>-<lv> can unstick a suspended device, but investigate first. Suspension is brief and normal during resize (sub-second); a device that stays suspended for minutes with no operation in progress usually means a stuck table reload or an underlying device problem. Resuming into a still-broken backing device can make things worse.

Thin pool full

Extend the pool: lvextend -L +<size>G <vg>/<pool> if the VG has free extents. If the VG is also full, add a PV first (vgextend) or delete thin snapshots and run fstrim on thin LV filesystems to reclaim blocks. Note the uncomfortable catch: if the pool hang is severe enough that LVM commands block on I/O to the pool, the lvextend may also hang. This is the worst case of the observability gap and the reason capacity alerts at 85% exist: fix this an hour before it hangs, not during.

Prevention

  • Monitor the management plane itself. Track how long pvs/vgs/lvs take. A healthy system answers in under a second; creeping latency is the earliest warning of scan scope growth, device trouble, or lock contention.
  • Collect incident data via dmsetup. dmsetup status baselines (thin pool used/total blocks, suspended state) keep working when LVM tools do not. Collect them before you need them, or you will have no normal to compare against during an incident.
  • Serialize LVM operations. One LVM job at a time per host. Snapshot scripts, backup jobs, and monitoring polls should never overlap.
  • Bound multipath queuing. An all-paths-down device that queues I/O forever converts a path failure into a full LVM management-plane hang. Choose retry/queue policies deliberately.
  • Keep thin pools out of the red zone. Alert at 85% data and 75% metadata, and verify auto-extend actually works (dmeventd running, threshold below 100, VG free space available), because a hung pool hangs your tooling too.
  • Constrain device scans. On hosts with many SAN LUNs or multipath paths, use the lvm.conf filter (or the devices file on newer releases) so LVM only scans devices that can actually be PVs. This shrinks both scan time and the blast radius of a single dead device. On RHEL 9 the devices file is enabled by default (use_devicesfile=1); on RHEL 8 it is disabled by default.
  • Never leave pvmove unwatched. It holds serialization for hours on large volumes. Monitor progress and I/O impact until it completes.

How Netdata helps

  • Per-second block-layer metrics for dm devices from /proc/diskstats (IOPS, throughput, inflight I/O, accumulated I/O time) keep flowing during an LVM management-plane hang, because they come from the kernel, not from lvs.
  • D-state process visibility lets you correlate a hung-lvs report with a growing count of processes in uninterruptible sleep, which is the tell that this is a device wait, not a lock wait.
  • Thin pool capacity trending (data and metadata percent) gives you the 85%/90% early warning that prevents the queue-on-full hang in the first place.
  • I/O latency on dm devices versus underlying PVs pinpoints whether the LVM layer or the physical layer is introducing the delay that is slowing your commands.
  • Alerting on missing PVs and LV health flags catches the dead-device condition upstream of the hang, while pvs still works.