The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / nvme / nvme-high-io-latency ▌

Operations Guides

NVMe high I/O latency: reading block-layer latency and the outliers that matter

Latency complaints about NVMe arrive as “the database is slow” or “queries time out randomly.” By the time the report reaches you, the mean latency from iostat often looks fine, because NVMe mean latency is almost always fine. The damage comes from the tail: the occasional 10 ms or 1 s outlier that breaks a request deadline and cascades into application timeouts.

The block layer gives you averages, and averages hide exactly the outliers that matter. This guide covers how to read the block-layer counters, how to get the actual latency distribution, and how to map a latency spike to its cause: thermal throttling, garbage collection pressure, PCIe transport degradation, or a controller on its way to a reset.

One thing up front: if the machine booted in the last few minutes, wait. Post-boot elevated latency for 1-5 minutes is normal while the controller’s flash translation layer loads mapping tables into DRAM. Do not alarm on that window.

What this means

“High NVMe latency” is a symptom with at least five distinct root causes, and they need different responses. The block layer measures the time from I/O submission to completion, which includes block-layer queuing, NVMe driver processing, controller firmware processing, and NAND access time. A spike can originate at any of those stages:

  • Host side: queuing at high queue depth, a misconfigured I/O scheduler, PCIe link power management (ASPM) transitions.
  • Transport: PCIe correctable errors silently retransmitting, or a link retrained to a lower speed or width.
  • Controller: thermal throttling, garbage collection competing with host I/O, firmware hangs that precede a controller reset.
  • Media: read retries on degrading NAND, showing up as sporadic read latency on cold data.

Under light load, a healthy drive delivers roughly 70-150 us for 4K random reads and 10-30 us for writes at the device level. Mean latency within 2x of your baseline is normal. Mean at 2-5x baseline, or p99 above 1 ms for reads, deserves investigation. Any single I/O taking more than 1 second indicates a controller stall, a garbage collection storm, or an imminent controller reset. Treat that as page-worthy.

Common causes

CauseWhat it looks likeFirst thing to check
Thermal throttlingGradual latency increase that tracks temperature; recovers when load dropsComposite temperature vs throttling history in SMART
GC stall / write cliffSudden 50-90% throughput drop and latency spike with normal temperatureDrive fill level, TRIM/discard configuration
PCIe link degradationUniformly higher latency, capped bandwidth, no NVMe errorscurrent vs max link speed/width, AER counters
SLC cache exhaustionStep-function write latency jump during sustained sequential writesDoes latency recover after idle time
Controller hang (pre-reset)Latency climbing toward the I/O timeout, then a reset in the kernel logdmesg for timeout and reset messages
APST power-state transitionsPeriodic latency spikes at low load, otherwise healthy driveWhether autonomous power state transitions are enabled
Post-boot FTL loadHigh latency for 1-5 minutes after boot, then normalUptime; expected, no action
Queue depth effectsLatency 3-5x higher at QD32 than QD1 on a healthy driveCompare latency at matched queue depths

Quick checks

All read-only and safe to run during an incident.

# 1. Snapshot the block-layer counters (cumulative since boot)
cat /sys/block/nvme0n1/stat

# 2. Instantaneous queue depth (field 9)
awk '{print $9}' /sys/block/nvme0n1/stat

# 3. Average read and write latency over 5 seconds
S1=$(cat /sys/block/nvme0n1/stat); sleep 5; S2=$(cat /sys/block/nvme0n1/stat)
echo "$S1" | awk '{print "r_ios="$1" r_ms="$4" w_ios="$5" w_ms="$8}'
echo "$S2" | awk '{print "r_ios="$1" r_ms="$4" w_ios="$5" w_ms="$8}'
# avg_read_ms = (delta field4) / (delta field1); avg_write_ms = (delta field8) / (delta field5)

# 4. Latency distribution, not averages (requires bcc-tools or bpftrace)
biolatency -D 10 1   # per-disk histograms for all disks; read the nvme0n1 section

# 5. Controller temperature and thermal history
nvme smart-log /dev/nvme0 | grep -i "temperature\|thm_temp"

# 6. Kernel log for timeouts and resets
dmesg | grep -i "nvme" | grep -i "timeout\|reset"

# 7. PCIe link state: current vs maximum
cat /sys/class/nvme/nvme0/device/current_link_speed
cat /sys/class/nvme/nvme0/device/max_link_speed
cat /sys/class/nvme/nvme0/device/current_link_width
cat /sys/class/nvme/nvme0/device/max_link_width

# 8. PCIe correctable errors (silent retransmissions)
cat /sys/class/nvme/nvme0/device/aer_dev_correctable  # absent if AER unsupported

# 9. I/O scheduler (should be "none" for NVMe)
cat /sys/block/nvme0n1/queue/scheduler

# 10. Drive fill level and TRIM state
df -h /your/mountpoint
lsblk -D | grep nvme

How to diagnose it

Work from the symptom shape to the cause. The shape of the latency curve is the strongest discriminator you have.

  1. Rule out the post-boot window. Check uptime. If the host booted less than 5 minutes ago, the FTL is still loading mapping tables into DRAM and elevated latency is expected. Re-check after the window.

  2. Establish whether the tail or the mean is the problem. Compute average latency from /sys/block/nvme0n1/stat deltas over several intervals, then run biolatency -D 10 1 and compare. If the average is normal but the histogram shows a second mode or outliers above 10 ms, you have a tail-latency problem, and the average will never show it. This is the single most common instrumentation mistake: /sys/block gives averages, and the p99/p999 tail is what actually breaks SLAs.

  3. Check for any I/O over 1 second. In the biolatency histogram, anything in the >1 s bucket means a controller stall, a GC storm, or a pending controller reset. Check dmesg immediately for timeout messages; the default I/O timeout is typically 30 seconds (/sys/module/nvme_core/parameters/io_timeout), and a hang that long ends in a reset. See nvme nvme0: I/O timeout, Resetting controller.

  4. Correlate with temperature. Pull composite temperature and the thermal management transition counters (thm_temp1_trans_count, thm_temp2_trans_count). If latency climbs as temperature climbs and recovers when load is removed, the controller is throttling. No media errors, no error log entries.

  5. Correlate with write pressure and fill level. If latency spikes are periodic, temperature is normal, and write throughput drops 50-90% during the spikes, the FTL’s garbage collection is competing with host I/O. Check drive fill level (the pattern turns severe above roughly 80-90% full) and confirm TRIM is actually running. Without TRIM, the FTL treats the whole device as live data and GC runs at maximum pressure continuously.

  6. Check the PCIe transport. Compare current vs max link speed and width. A Gen4 x4 device retrained to Gen3 x2 delivers one-quarter the bandwidth with zero NVMe-level errors, and every retransmission from a marginal link shows up as latency. Non-zero and growing aer_dev_correctable counters confirm physical layer degradation. Latency from this cause is uniform, not spiky.

  7. Match queue depth before concluding anything. Latency naturally rises with queue depth: a jump from QD1 to QD32 raises average latency 3-5x on a perfectly healthy drive. Sample field 9 of /sys/block/nvme0n1/stat frequently and compare latency only at similar queue depths.

  8. Consider power management. If spikes happen at low load and everything else is clean, autonomous power state transitions (APST) or PCIe ASPM are prime suspects. The controller or the link drops into a low-power state and the wake-up latency lands on the next I/O. See the power-state fix below.

flowchart TD
  A[Latency outlier observed] --> B{Host booted < 5 min ago?}
  B -- yes --> C[Normal: FTL table load, re-check later]
  B -- no --> D{Tail or mean? Run biolatency}
  D -- "any I/O > 1s" --> E[Check dmesg for timeouts - controller stall or imminent reset]
  D -- "p99 elevated, spiky" --> F{Temperature rising with latency?}
  F -- yes --> G[Thermal throttling]
  F -- no --> H{Write-heavy, drive >80% full?}
  H -- yes --> I[GC stall / write cliff]
  H -- no --> J{Link speed/width degraded or AER errors?}
  J -- yes --> K[PCIe transport degradation]
  J -- no --> L[APST/ASPM power-state transitions]

Metrics and signals to monitor

SignalWhy it mattersWarning sign
Block stat deltas (ms_reading, ms_writing / ops)Average read/write latency per intervalMean 2-5x baseline sustained
Latency histogram (biolatency/BPF)The only way to see p99/p999 and multi-modal distributionsAny I/O over 1 s; p99 > 1 ms reads
Composite temperature + TMT transitionsConfirms or rules out thermal throttlingLatency and temperature rising together
ios_in_progress (stat field 9)Queue depth context for every latency readingQD rising while latency rises (saturation)
PCIe link current vs max speed/widthSilent bandwidth cap with no errorscurrent < max on either axis
AER correctable error countersRetransmissions that look like latencyAny sustained non-zero rate
Kernel log timeout/reset messagesController hangs surface here before anywhere elseAny timeout; resets more than once per week
Drive fill level + discard enabledGC pressure is a function of how full the FTL thinks the drive isAbove 80-90% full, or no TRIM configured

Fixes

Thermal throttling

Reduce write load immediately to let the controller cool, then fix the thermal path: verify airflow, fan function, and heatsink contact. M.2 drives without heatsinks throttle under sustained load routinely; this is a hardware/environment fix, not a tuning fix. Track the thermal management transition counters afterward to confirm the drive is no longer entering throttled states.

GC pressure and the write cliff

Stop or throttle the write workload if latency is SLA-breaking. Run fstrim on the mounted filesystem for immediate relief, and make sure either continuous discard or a scheduled fstrim is configured permanently. Keep more than 15-20% free space so the FTL has headroom for garbage collection. On a nearly full consumer drive under an enterprise workload, no configuration change fixes this; the fix is a correctly classed drive or more overprovisioning.

APST or ASPM power-state spikes

Disable autonomous power state transitions on the controller:

# Disable APST on the controller (feature 0x0c)
nvme set-feature /dev/nvme0 -f 0x0c --value=0

This changes device behavior and does not persist across reboots or controller resets; reapply it at boot via a udev rule or systemd unit. It trades idle power savings for consistent latency, which is usually the right trade on latency-sensitive database hosts. Disabling ASPM at the platform level is a separate, boot-time or firmware-level change; test before applying broadly.

Reseat the drive and inspect connectors, cables, and retimers. Power cycle to force link renegotiation and re-check current vs max link parameters. If a different slot resolves it, the slot or riser was the problem, not the drive.

Controller hang pattern

If latency climbs toward the timeout and resets repeat, check the firmware version (nvme id-ctrl /dev/nvme0 | grep fr) against known issues and plan a firmware update. A single reset may be transient; repeated resets in a loop indicate a firmware or hardware fault. See NVMe controller reset loop.

Prevention

  • Baseline latency at your real queue depths. Absolute thresholds mislead; a 24-hour baseline at production QD is the reference that makes deviations meaningful.
  • Alert on the tail, not the mean. If you only collect /sys/block averages, add BPF-based histogram collection and alert on p99, not average.
  • Alert on any I/O over 1 second. That threshold catches controller stalls and GC storms regardless of what the average says.
  • Track temperature and TMT transition counters continuously. Thermal throttling leaves no errors; the transition counters are the only record that it happened.
  • Verify TRIM and fill-level policy at provisioning. Chronic write-latency spikes from GC pressure are usually a missing fstrim schedule discovered months late.
  • Record link speed/width at deployment and alert on any downgrade. Silent retraining persists indefinitely because nothing errors.
  • Suppress alerts for the first 5 minutes after boot so the FTL load window does not page anyone.

How Netdata helps

  • Netdata collects NVMe SMART signals continuously, so a latency spike can be correlated against composite temperature, thermal management transition counts, and warning/critical temperature time in the same dashboard, confirming or ruling out throttling in one view.
  • Critical warning bits are exposed per-bit, so bit 1 (temperature) during a latency event is distinguishable from bit 0 (spare) or bit 2 (reliability degraded), each of which has a different latency signature.
  • Media error and error log entry rates surface read-retry latency on degrading NAND, the case where read latency is sporadically high on cold data with no thermal cause.
  • Unsafe shutdowns, power cycles, and endurance signals (available spare, percentage used) give the wear context that explains why GC pressure and retry latency get worse over time on an aging drive.
  • Block-layer averages from /sys/block are useful for trend, but the tail still needs BPF tooling; use Netdata for correlation across thermal, wear, and error signals, and biolatency-style histograms for the distribution itself.