The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / lvm / lvm-io-hang-suspended-device-d-state ▌

Operations Guides

LVM I/O hang: a suspended dm device and processes stuck in D state

Processes are stuck in D state. kill -9 does nothing. lvs hangs. Load average is climbing. The root cause is almost always a device-mapper device stuck in suspended state.

A suspended dm device blocks all I/O to the underlying logical volume. Every process performing I/O to that volume enters uninterruptible sleep (D state) and cannot be killed, even with SIGKILL. The only way to release them is to resolve the underlying I/O blockage and let queued I/O drain.

The critical diagnostic insight: lvs, pvs, and vgs take LVM metadata locks and perform disk I/O. During this incident, those tools hang alongside everything else. dmsetup talks directly to the kernel device-mapper interface with no locks and no disk I/O. It is the tool that works when nothing else does.

Suspension is normal dm operation. It happens during every resize, snapshot creation, and table reload. The key distinction is duration: normal suspension is sub-second. Sustained suspension for more than a few seconds is abnormal.

What this means

When a dm device is suspended, the kernel device-mapper target queues all incoming I/O requests without processing them. No reads complete. No writes complete. The kernel marks every process waiting on that I/O as TASK_UNINTERRUPTIBLE (D state). SIGKILL cannot interrupt this state because the kernel cannot safely free resources that may be in use by in-flight I/O.

flowchart TD
    A[dm device suspended] --> B[All I/O to LV blocked]
    B --> C[Processes enter D state - unkillable]
    C --> D[D-state count grows, load climbs]
    D --> E[Possible full system hang]
    B --> F[lvs pvs vgs also hang - need disk I/O]
    F --> G[dmsetup still works - reads kernel memory]
    G --> H[dmsetup status pinpoints cause]
    H --> I[Resolve blockage: extend pool or resume device]
    I --> J[Queued I/O drains, D-state processes release]

The cascade builds quickly. A dm device enters suspended state and stays there. I/O requests queue. Processes waiting on those requests go D state. More processes touch the affected filesystem, they queue too. Load average climbs. If the affected LV backs the root filesystem, database storage, or /var/log, the system may become fully unresponsive.

Common causes

CauseWhat it looks likeFirst thing to check
Thin pool exhaustion (queue_if_no_space)All thin LVs in the pool affected simultaneously; dmsetup status shows pool data at 100%; D in lv_attr health position 9dmsetup status --target thin-pool for used_data/total_data ratio
Failed snapshot removalSpecific snapshot device SUSPENDED after lvremove failed or was interrupted; not the whole pooldmsetup info -c for suspended flag on snapshot device
Stuck resize or table reloadAn lvextend, lvconvert, or pvmove was running when the hang started; specific LV affectedps aux | grep -E 'lvextend|lvconvert|pvmove'
Multipath queue_if_no_pathAll paths to a multipath device down; pvs/vgs/lvs hang on device scanning; any LV behind the device affectedmultipath -ll for path status

Thin pool exhaustion is the single most common cause. With the default queue_if_no_space policy, a full thin pool does not return errors to applications. It hangs silently. Operators investigate “server hung” as a kernel or hardware problem when LVM is the cause.

Quick checks

These commands are read-only and safe to run during an incident.

# Check which dm devices are suspended (works when lvs hangs)
dmsetup info -c -o name,suspended,open,attr

# Check thin pool data and metadata utilization from kernel memory
dmsetup status --target thin-pool

# Count D-state processes
ps aux | awk '$8 ~ /D/' | wc -l

# Identify D-state processes and their wait channels
ps -eo pid,stat,wchan:30,comm | grep ' D'

# Check kernel stack of a specific D-state process
cat /proc/<pid>/stack | grep -i 'dm\|thin\|mapper'

# Check for kernel I/O errors on underlying devices
dmesg | grep -i 'I/O error\|offline\|not ready' | tail -50

# Check if dmeventd is running (the auto-extend safety net)
pgrep -x dmeventd

# Check LVM lock file age (old lock file = stuck operation)
ls -la /run/lock/lvm/

# Time an LVM command to see if the management plane is responsive
time vgs --noheadings 2>&1

The single most important command is dmsetup status --target thin-pool. It reads pool utilization from kernel memory without touching disk. If used_data_blocks equals total_data_blocks, you have found the cause.

How to diagnose it

Step 1: Bypass LVM tools entirely. Start with dmsetup, not lvs.

dmsetup info -c -o name,suspended,open

Look for devices where the SUSPENDED column shows s. The OPEN column shows how many processes have the device open. High open count on a suspended device means many processes are stuck on it.

Step 2: If you use thin provisioning, check pool status.

dmsetup status --target thin-pool

The output includes used_data_blocks/total_data_blocks and used_metadata_blocks/total_metadata_blocks. If used_data equals total_data, the pool is full. The output also shows the active policy: queue_if_no_space (hangs on full) or error_if_no_space (returns errors on full).

Step 3: Confirm the D-state correlation.

# D-state processes and their wait channels
ps -eo pid,stat,wchan:30,comm | grep ' D'
# Stack trace for a specific stuck process
cat /proc/<pid>/stack

If D-state processes cluster around the same dm device minor number and that device is suspended, the diagnosis is confirmed. Check /proc/<pid>/stack for dm_ or thin_ function names to verify the process is blocked in the device-mapper layer.

Step 4: Check whether an LVM operation is stuck.

# Look for running LVM operations
ps aux | grep -E 'lvextend|lvconvert|pvmove|lvremove|lvcreate'
# Check lock files
ls -la /run/lock/lvm/
# If a lock file is old and the holding PID no longer exists, it may be stale
fuser /run/lock/lvm/* 2>/dev/null

Step 5: Check underlying storage for hardware errors.

dmesg | grep -i 'I/O error\|device offline\|link down' | tail -50

Kernel I/O errors on the underlying PV device can cause the dm layer to suspend I/O as a protective measure.

Step 6: Check multipath if applicable.

multipath -ll

If all paths to a multipath device are down and queue_if_no_path is enabled, LVM commands hang during device scanning. This is not a dm-suspend issue but presents identically.

Metrics and signals to monitor

SignalWhy it mattersWarning sign
dm device suspended stateSuspended dm device blocks all I/O; every process touching it goes D stateAny device SUSPENDED for more than 5 seconds with no approved LVM operation in progress
D-state process countGrowing count means incident is escalating; processes are unkillableCount increasing over time, processes clustered on same dm device
Thin pool data utilizationAt 100% with queue_if_no_space, all writes to all thin LVs freezedata_percent above 95% and climbing
Thin pool metadata utilizationMetadata exhaustion can cause pool corruption, not just I/O freezemetadata_percent above 75%
LVM command execution timeSlow commands mean management plane is degraded; monitoring goes blindpvs/vgs/lvs taking more than 5 seconds
LV health status (attr position 9)D = thin pool out of data space; F = failed; M = metadata read-onlyAny non-- value in position 9
Kernel I/O errors in dmesgHardware failures, SAN path loss, cable issuesNew I/O error messages for PV backing devices

Fixes

Thin pool exhaustion (the most common cause)

If dmsetup status --target thin-pool shows the pool is full, extend the pool LV, not the individual thin volumes.

# Extend the thin pool data LV (the pool, not the thin volumes)
lvextend -L +<size>G <vg>/<thinpool>

# If VG has no free space, add a PV first
pvcreate /dev/<new_device>
vgextend <vg> /dev/<new_device>
lvextend -L +<size>G <vg>/<thinpool>

If you cannot extend the pool immediately, deleting unnecessary thin snapshots frees pool blocks:

# List thin snapshots sharing the pool
lvs -o lv_name,origin -S 'lv_layout=thin,sparse'
# Remove a snapshot to reclaim pool space
lvremove <vg>/<snapshot_name>

Running fstrim on thin LV filesystems can reclaim discarded blocks:

fstrim /mountpoint

Once the pool has free space, queued I/O begins completing automatically. D-state processes release as their writes finish. No dmsetup resume is needed for thin pool cases; the device un-suspends once the pool can accept allocations again.

The kernel dm-thin module queues writes for up to 60 seconds by default when the pool is full (configurable via the no_space_timeout module parameter); after that, queued writes fail.

Failed snapshot removal leaving a suspended device

If dmsetup info shows a snapshot device in SUSPENDED state after a failed or interrupted lvremove, manually resume the device:

# Resume a stuck snapshot device
dmsetup resume /dev/mapper/<vg>-<snapshot>

This is the documented workaround for the case where a failed snapshot removal leaves the dm device suspended, blocking all further I/O.

Stuck LVM operation

If an lvextend, lvconvert, or pvmove is holding a lock and not completing, identify the holder:

fuser /run/lock/lvm/* 2>/dev/null

If the operation is legitimately long-running (a large pvmove), it may eventually complete. If it is stuck on I/O, resolve the underlying storage issue first.

For pvmove, use pvmove --abort to cleanly unwind. Never kill a pvmove with kill -9.

Multipath queue_if_no_path

If all paths to a multipath device are down, restore storage connectivity first. LVM commands and dm devices recover once paths return. Check multipath -ll for path status and investigate the storage fabric, HBA, or SAN presentation.

Last resort: forced removal or reboot

dmsetup remove --force replaces the device table with one that fails all I/O. This may allow D-state processes to error out and be killed. This is destructive: all in-flight data is lost.

The --force option replaces the device table with one that fails all I/O, per dmsetup(8). Stuck D-state processes then receive I/O errors and can exit.

If the root filesystem is on the affected LV and the system is fully unresponsive, the only remaining option may be a forced reboot via out-of-band management (IPMI, console). Use SysRq if possible:

# Emergency sync (may not complete if I/O fully blocked)
echo s > /proc/sysrq-trigger
# Remount filesystems read-only
echo u > /proc/sysrq-trigger
# Reboot immediately
echo b > /proc/sysrq-trigger

SysRq requires kernel.sysrq enabled. If I/O is completely blocked, even SysRq sync may not complete. A hard reset via IPMI may be the only option.

Prevention

  • Enable thin pool auto-extend explicitly. The default thin_pool_autoextend_threshold is 100, which means disabled. Set it to 80 or lower in /etc/lvm/lvm.conf with a nonzero thin_pool_autoextend_percent.
  • Verify dmeventd is running. Auto-extend only works if dmeventd is alive and monitoring the pool. Check pgrep -x dmeventd and the lvm2-monitor.service systemd unit.
  • Monitor thin pool data AND metadata utilization. Data exhaustion causes I/O freeze. Metadata exhaustion can cause pool corruption. Both must be watched independently.
  • Use dmsetup for monitoring, not lvs. LVM tools take locks and perform disk I/O. During the incidents you most need visibility, they hang. Build monitoring around dmsetup status for production thin pool tracking.
  • Audit pool policies before the incident. Know which pools use queue_if_no_space (hang on full) versus error_if_no_space (return errors on full). Use dmsetup status --target thin-pool to see the active policy. For pools backing stateful workloads that can handle write errors cleanly, consider switching to error_if_no_space via lvchange --errorwhenfull y.
  • Maintain VG free space headroom. Auto-extend silently fails if the VG has no free extents. Keep enough free space for at least two thin pool extension cycles.

How Netdata helps

  • Per-second dm device metrics: Netdata collects disk I/O statistics for every dm device at one-second resolution, including inflight I/O and latency. A sudden spike in inflight I/O with zero completed operations is the signature of a suspended device.
  • D-state process tracking: Netdata monitors process states across the system. A rising D-state count correlated with a specific dm device identifies the affected volume within seconds.
  • Thin pool utilization trends: Netdata collects data_percent and metadata_percent for thin pools. Rate-of-change analysis projects when the pool will reach 100%, giving hours of lead time.
  • Kernel log correlation: Netdata collects kernel log events alongside metrics. Block I/O errors from dmesg correlate with dm device state changes, pinpointing whether the cause is LVM-level (thin pool full) or storage-level (hardware failure).
  • LVM command execution latency: Netdata can detect when the management plane is degrading. A vgs command taking 10 seconds instead of the usual sub-second is an early warning that device scanning is hitting unresponsive hardware.