The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / memcached / memcached-slab-imbalance ▌

Operations Guides

Memcached evicting with memory to spare: the slab-class imbalance trap

Evictions are climbing on your memcached instance. Global memory is at 55% of limit_maxbytes. The natural response is to add memory, restart the daemon, or hunt for an eviction storm. None of those help here, because the cache is not out of memory in aggregate. One slab class is at 100% capacity and discarding recently-active items, while several other classes sit mostly empty.

This is slab-class imbalance. The global bytes and limit_maxbytes counters aggregate over a partitioned allocator, so a healthy-looking global number can hide a saturated class. The fix is almost never “add memory”: new pages go to whichever class happens to be allocating next, not to the class that is evicting.

This article covers detecting the imbalance with stats slabs and stats items, distinguishing harmful eviction from healthy turnover, and relieving pressure without a full cache wipe.

What this means

Memcached does not allocate from a single free pool. At startup it pre-allocates a fixed block (-m, default 64 MB), divides it into 1 MB pages, and assigns pages to slab classes. Each class owns items in a specific chunk-size bucket, growing by a factor (-f, default 1.25). Items do not cross class boundaries: a 200-byte object cannot borrow space from a class sized for 96-byte objects.

Memory pressure is therefore per-class. A workload dominated by 1 KB JSON blobs saturates one or two classes, while 96-byte session tokens have plenty of room. The global bytes counter sums every class, so it can read 60% of limit_maxbytes while the active class is pinned at 100% used_chunks, 0 free_chunks, and evicting items the application still wants.

The usual operator instincts backfire:

  • Adding memory (-m higher on restart) allocates new pages to whichever slab class receives the next SET. The saturated class does not necessarily receive them. Idle classes grow instead. Runtime memory-limit change: memcached does support cache_memlimit <MB> at runtime (introduced in 1.4.27), but this adjusts the global -m budget rather than a specific slab class. New pages freed by lowering the limit come from whichever class the allocator decides, not specifically from the class that is under pressure, so this does not solve a slab-class imbalance.
  • Restarting re-partitions the cache from cold. This works, but it is a full cache wipe and triggers a thundering herd on the backend. It is a blunt instrument for what is usually a sustained workload-shape problem.
  • Doing nothing works if slab_automove is enabled and the algorithm keeps up. It fails when automove is disabled or when the imbalance outruns the conservative mode-1 algorithm.
flowchart TD
    A[Workload item-size shift] --> B[One slab class fills]
    B --> C[Class at 100% used_chunks]
    C --> D[Evicting recently-active items]
    D --> E[Hit ratio drops for that size range]
    A --> F[Other classes stay idle]
    F --> G[Global bytes sits at 50-70%]
    G --> H[Operator adds memory]
    H --> I[New pages go to idle classes]
    I --> D

The loop in the diagram is the trap. Adding memory without changing the partition feeds the imbalance instead of relieving it.

Common causes

CauseWhat it looks likeFirst thing to check
Application serialization changeEvictions begin shortly after a deploy; one new slab class is full while an older one is suddenly idleCorrelate first evictions with deploy time; compare per-class used_chunks before and after
Growth factor mis-sized for the workloadA small number of classes carry most items while many classes have few or zero itemsstats slabs shows sparse usage; -f is at default 1.25 but item sizes cluster between classes
Cache warming with a different size distribution than steady stateImbalance appears immediately after restart, before production traffic settlesCompare slab allocation at minute 5 versus hour 2 of uptime
slab_automove disabled (mode 0)Imbalance persists for hours or days with no page movementstats settings shows slab_automove 0
Item size inflation over timeThe saturated class creeps upward in mem_requested; bytes_written / cmd_get ratio drifts upTrack mem_requested per class over days

Quick checks

All read-only and safe against a production instance. None mutate cache state.

# Global memory and eviction overview
echo "stats" | nc -q1 localhost 11211 | grep -E "STAT (bytes |limit_maxbytes|evictions|curr_items)"

# Per-slab allocation: look for a class with free_chunks 0 next to classes with free_chunks > 0
echo "stats slabs" | nc -q1 localhost 11211 | grep -E "(used_chunks|free_chunks|total_pages|chunk_size)"

# Per-slab item health: low evicted_time in an evicting class is the smoking gun
echo "stats items" | nc -q1 localhost 11211 | grep -E "(evicted|evicted_time|age|number)"

# Confirm whether slab_automove is enabled
echo "stats settings" | nc -q1 localhost 11211 | grep "slab_automove"

# Recent restart history, in case the imbalance started at boot
echo "stats" | nc -q1 localhost 11211 | grep "STAT uptime"

The diagnostic signature is the pair: a class with free_chunks == 0 and a non-zero evicted counter, sitting alongside classes with significant free_chunks and zero evictions. Add a low evicted_time in the saturated class and the diagnosis is confirmed.

The -q flag is not portable across all nc implementations. On systems where it is unavailable, use -w 1 (connection timeout) instead.

How to diagnose it

  1. Identify the saturated class. From stats slabs, find the slab class (the STAT <id>:<field> <value> lines, where <id> is the class number) where used_chunks equals total_chunks and free_chunks is 0. Note its chunk_size: that is the overflowing item-size bucket.
  2. Confirm it is actively evicting. From stats items, look at the same class id. A non-zero evicted counter that is increasing between two samples means live items are being discarded. A stable evicted means the class is full but not under pressure; that state is fine.
  3. Check eviction quality. In the same stats items output, read evicted_time for that class. This is the age, in seconds since last access, of the most recently evicted item. Values in hours or days mean the LRU is shedding cold items cleanly. Values under 300 seconds mean recently-active items are being evicted: that is the harmful case.
  4. Verify other classes have room. Look for classes with free_chunks well above zero and zero evictions. Their existence proves the problem is partitioning, not aggregate memory. If every class is full, this is a different problem: the cache is genuinely undersized. See Memcached evictions climbing: the cache is full and discarding live data.
  5. Check whether automove is helping. stats settings | grep slab_automove reports the current mode. Mode 0 is off. Mode 1 is the conservative algorithm. Mode 2 is aggressive and not recommended for sustained use. If automove is on but the imbalance persists, the algorithm may be unable to find a suitable donor class, or demand is outrunning the one-page-per-10-seconds pace.
  6. Quantify the impact. Watch the global hit ratio while the saturated class evicts. A hit-ratio drop combined with stable aggregate memory is the user-visible symptom that justifies intervention.

Metrics and signals to monitor

SignalWhy it mattersWarning sign
Per-slab free_chunks (stats slabs)Shows which classes are at capacityOne class at 0 while others have hundreds or thousands free
Per-slab used_chunks / total_chunksSaturation ratio per classA class pinned at 1.0 for hours
Per-slab evicted (stats items)Confirms active eviction, not just fullnessCounter increasing while other classes stay flat
Per-slab evicted_timeDiscriminates harmful thrash from healthy turnoverBelow 300 seconds in the saturated class
Global bytes / limit_maxbytesThe misleading number that hides the problemSitting at 50-70% while evictions climb
slab_automove modeWhether the daemon is trying to self-correctMode 0 when imbalance is present
Hit ratio deltasUser-visible impactDeclining hit ratio with stable global memory
mem_requested per classActual bytes requested versus chunk bytes allocatedHigh fragmentation indicates wrong chunk size for the workload

Fixes

Each fix below targets a different cause. Pick based on whether the imbalance is acute (needs relief now) or structural (needs a config change on next restart).

Enable slab_automove at runtime

If slab_automove is at mode 0, turn it on without restarting:

# Enable conservative automove (mode 1). Safe for production.
echo "slabs automove 1" | nc -q1 localhost 11211

This activates a background thread that watches for classes with sustained evictions and moves 1 MB pages from idle classes. The algorithm is deliberately slow: at most one page every 10 seconds, and only from classes with zero recent evictions. It will not stabilize a violent imbalance instantly, but it relieves chronic drift.

Mode 2 (slabs automove 2) moves pages faster but is not recommended for sustained use; it can introduce jitter as pages are evicted from donor classes.

Manually reassign a page

For acute pressure on a single class, move a page directly from an idle class to the saturated one. Destructive to the donor class: all items on the reassigned page are evicted as part of the move.

# Move one page from class <src> to class <dst>. Evicts all items on the page in <src>.
echo "slabs reassign <src> <dst>" | nc -q1 localhost 11211

Pick a donor class with high free_chunks and zero evictions. The reassigned page is 1 MB, so choose a class with low-value items. The command returns a numeric status; retry with a different donor if it refuses the move.

Per the official protocol documentation, slabs reassign returns one of the following text responses rather than a numeric status code: OK (page scheduled to move), BUSY [message] (a page is already being processed; try again later), BADCLASS [message] (invalid class id), NOSPARE [message] (source class has no spare pages), NOTFULL [message] (destination class must be full to receive pages), UNSAFE [message] (source class cannot move a page right now), or SAME [message] (source and destination must differ).

This is a one-shot fix. It does not prevent the imbalance from returning if the workload keeps the saturated class pinned.

Adjust the growth factor on next restart

If stats slabs shows many near-empty classes between the saturated ones, the default growth factor of 1.25 may be spreading the workload across too many classes. A lower factor (for example -f 1.10) creates more finely-grained classes and reduces internal fragmentation, at the cost of more classes competing for pages.

This requires a restart, which means a full cache wipe. Schedule it for a low-traffic window and have a warming plan ready.

Restart to reset allocation

Restarting re-partitions memory from cold based on the items that arrive first. If the cache warmed with a different size distribution than steady-state traffic, this can break the calcification.

This is the bluntest fix. It loses all cached data and triggers a cold-start cascade on the backend. Prefer runtime automove or manual reassignment unless the imbalance is severe, persistent, and the above options have failed.

Prevention

  • Verify slab_automove is enabled. Check with stats settings | grep slab_automove and enable mode 1 if it is at 0. Mode 1 is conservative enough for long-term use.
  • Monitor per-slab, not just global. Track free_chunks, used_chunks, evicted, and evicted_time per class. The global bytes counter is necessary but not sufficient.
  • Review item-size distribution after deploys. A serialization change is the most common trigger. Compare per-class used_chunks before and after the deploy.
  • Size the growth factor to the workload. Default 1.25 is reasonable for mixed workloads but suboptimal when item sizes cluster tightly.
  • Track mem_requested per class over time. Drift upward indicates item-size inflation, which eventually saturates the class.
  • Watch direct_reclaims per slab. Non-zero values mean worker threads are evicting inline because the LRU maintainer cannot keep up. That is the moment chronic imbalance crosses into acute.

How Netdata helps

  • Netdata collects per-slab metrics from stats slabs and stats items at per-second resolution, so the moment a class hits free_chunks == 0 you see it without polling by hand.
  • The global bytes / limit_maxbytes ratio and per-slab saturation appear on the same dashboard, making the “looks fine globally, broken per-class” pattern obvious at a glance.
  • Anomaly detection flags unusual per-slab eviction spikes even when global counters are still inside their normal range, which is exactly the slab-imbalance signature.
  • Correlating per-slab evicted_time with backend latency or hit-ratio drops lets you confirm that the saturated class is the one harming users, not just the one with the most evictions.
  • Per-slab direct_reclaims and lrutail_reflocked surface the moment the LRU maintainer falls behind, before the hit-ratio drop becomes visible to clients.