The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / nvme / nvme-thermal-throttling ▌

Operations Guides

NVMe thermal throttling: the drive runs hot and performance quietly drops

The database is slow. CPU utilization is low, the query plan has not changed, and there are no I/O errors in dmesg, no media errors in SMART, no failed disk anywhere. Yet p99 query latency has doubled and IOPS are half of what they were last week.

This is the classic NVMe thermal throttling incident. The controller detected that it was running too hot and quietly reduced its own performance to protect itself. There is no error, no log entry, no kernel message. The drive simply gets slower until it reaches thermal equilibrium, and it gets faster again when the load drops. If you are only watching error counters and application logs, you will never see it.

An M.2 drive without a heatsink can hit 80C under sustained load, throttling database performance while the CPU is nearly idle. This is a common monitoring blind spot because teams watch CPU temperature but not NVMe temperature.

What this means

Every NVMe controller has vendor-defined temperature thresholds. The two that matter are:

  • WCTEMP (Warning Composite Temperature Threshold): at or above this temperature, the controller throttles. Performance degrades, but the drive is self-protecting. Typical values are around 70-80C on consumer drives and 75-85C on enterprise drives.
  • CCTEMP (Critical Composite Temperature Threshold): the emergency threshold, typically around 85C on consumer drives and 90-100C on enterprise drives. Sustained operation here risks controller shutdown.

Below WCTEMP, some controllers also implement lighter thermal management states (TMT1, a light throttle, and TMT2, a heavy throttle). WCTEMP and CCTEMP live in the Identify Controller data structure, not the SMART log, which is why most monitoring tools never show them and why teams do not know their own thresholds.

The throttle works by reducing internal clock speeds and NAND interface rates. From the host’s perspective: throughput declining, latency rising, queue depth growing because I/Os are backing up. The correlation between rising temperature and falling throughput is the signature. Garbage collection stalls and firmware problems cause similar performance drops but with no temperature correlation, which is exactly how you tell them apart.

Under a latency-sensitive workload there is a feedback loop worth understanding: throttling slows the drive, requests queue up, the queue keeps the drive busy, and the drive stays hot. It may stabilize at permanently reduced performance until you reduce the load.

flowchart TD
  A[Sustained I/O load] --> B[Composite temperature rises]
  B --> C{Temperature >= WCTEMP?}
  C -- no --> A
  C -- yes --> D[Controller throttles: clock and NAND rate reduced]
  D --> E[Throughput drops, latency and queue depth rise]
  E --> F{Load reduced or cooling fixed?}
  F -- yes --> G[Temperature falls, performance recovers]
  F -- no --> H{Temperature >= CCTEMP?}
  H -- no --> E
  H -- yes --> I[critical_warning bit 1 sustained, critical_comp_time increasing: escalate]

One more subtlety: the composite temperature reported in SMART is the controller’s own self-report, typically weighted across its sensors. It may not be the hottest NAND die. Individual temperature sensors are exposed separately via hwmon (temp2, temp3), and they can run meaningfully hotter than the composite value.

Common causes

CauseWhat it looks likeFirst thing to check
M.2 drive without a heatsinkThrottling starts minutes into sustained load; temperature hits 80C; performance cycles as the drive heats and coolsPhysical inspection; is there a heatsink and is it making contact
Blocked or failed chassis airflowTemperature climbs across all components, not just the drive; correlates with fan failure or filter clogChassis fan status, other component temperatures
Adjacent high-heat componentsDrive temperature tracks a neighbor’s load (GPU, another NVMe device) rather than its ownCompare drive temperature with its own I/O rate
Sustained 100% write load exceeding the thermal envelopeThrottling begins only during the heavy job (backup, batch, compaction) and clears afterCorrelate throttling windows with job schedules
Ambient temperature increaseGradual upward trend in drive temperature over days, independent of workloadData center or rack inlet temperature trend

Quick checks

All of these are safe and read-only.

# Current composite temperature (Kelvin in raw output; subtract 273.15 for Celsius)
nvme smart-log /dev/nvme0 | grep "^temperature"

# The drive's actual throttle thresholds (Kelvin; subtract 273.15 for Celsius)
nvme id-ctrl /dev/nvme0 | grep -i "wctemp\|cctemp"

# Per-sensor temperatures via hwmon (millidegrees Celsius; divide by 1000)
cat /sys/class/nvme/nvme0/hwmon*/temp1_input
cat /sys/class/nvme/nvme0/hwmon*/temp2_input
cat /sys/class/nvme/nvme0/hwmon*/temp3_input

# Cumulative time above WCTEMP and CCTEMP (minutes)
nvme smart-log /dev/nvme0 | grep -i "warning_temp_time\|critical_comp_time"

# Thermal management transition counts and total time
nvme smart-log /dev/nvme0 | grep -i "thm_temp"

# Is the drive currently flagging a temperature threshold? (bit 1 = 0x02)
nvme smart-log /dev/nvme0 | grep "critical_warning"

A few reading notes:

  • If warning_temp_time or critical_comp_time is increasing between two samples taken minutes apart, the drive is spending time above threshold right now, not just historically.
  • Some drives do not implement the time-above-threshold counters or the TMT counters; they read zero even when throttling. A zero does not prove the absence of throttling. Check current temperature against WCTEMP instead.
  • If temp2_input or temp3_input does not exist, the drive exposes only the composite sensor.

How to diagnose it

  1. Confirm the performance drop has no error signature. Check dmesg for NVMe errors or resets and check nvme smart-log /dev/nvme0 for media_errors growth. Thermal throttling presents with clean error counters. If you find PCIe AER errors or link retraining instead, you have a transport problem, not a thermal one.

  2. Read the current composite temperature and the drive’s own thresholds. Run nvme smart-log for temperature and nvme id-ctrl for wctemp/cctemp. Convert Kelvin to Celsius. If the current temperature is at or above WCTEMP, throttling is either active or imminent. Do not assume generic thresholds; they vary widely by vendor and drive class.

  3. Check the per-sensor temperatures via hwmon. If temp2 or temp3 runs well above the composite value, part of the drive (often a NAND die) is hotter than the headline number suggests. The mapping of sensor numbers to physical components is vendor-specific.

  4. Establish that temperature and performance move together. Take a few samples of temperature, throughput, and latency during the slow window. Thermal throttling shows a tight correlation: temperature up, throughput down, latency up. A throughput drop with flat temperature points at garbage collection pressure or SLC cache exhaustion instead.

  5. Check the cumulative counters for history. warning_temp_time, critical_comp_time, and the TMT transition counts tell you whether this is a first event or a chronic condition. A steadily growing warning_temp_time means the drive has been throttling repeatedly, possibly for weeks, even if you only noticed today.

  6. Identify the heat source. If accessible, inspect the drive: heatsink present and seated, airflow path clear, no hot neighbor. Correlate the throttling windows with workload schedules. A drive that only throttles during the nightly backup has a workload-thermal mismatch; a drive that throttles under ordinary load has a cooling problem.

Metrics and signals to monitor

SignalWhy it mattersWarning sign
Composite temperature (nvme.device_composite_temperature, Kelvin in JSON; subtract 273.15 for Celsius)The primary thermal state; throttling starts at the vendor’s WCTEMPTrending upward over days, or within ~10C of WCTEMP under peak load
critical_warning bit 1 (temp_threshold dimension)The drive’s own assertion that a temperature threshold was crossedAny assertion; sustained assertion with rising critical_comp_time is an escalation
Warning composite temperature time (nvme.device_warning_composite_temperature_time)Cumulative minutes above WCTEMP; reveals thermal stress history even if you missed the live eventRate of increase > 0
Critical composite temperature time (nvme.device_critical_composite_temperature_time)Cumulative minutes above CCTEMP, the emergency zoneAny non-zero rate of increase
TMT1/TMT2 transitions and time (nvme.device_thermal_mgmt_temp{1,2}_transitions_rate, ..._time)Direct evidence the drive is entering throttling states, and how much of its life it spends thereRising transition counts or total time; unsupported drives always read zero
Throughput and latency from the block deviceThe symptom side of the correlation; confirms the throttle is what is slowing the applicationDeclining throughput and rising latency that track temperature, with no errors

The single most useful habit: alert on warning_temp_time rate of change, not just on live temperature. The counter catches thermal stress events that happened between your samples or overnight when nobody was watching.

Fixes

Improve cooling (the actual fix for a cooling problem)

  • Add or reseat a heatsink on M.2 drives. M.2 slots provide essentially no airflow. A bare M.2 drive under sustained load is the worst offender and can hit 80C; with a heatsink the same load may never reach the throttle threshold. Verify thermal pad contact.
  • Restore airflow. Clear blocked intake paths, replace failed fans, check that nothing is exhausting hot air directly onto the drive. Drives mounted next to high-heat components like GPUs inherit that heat.
  • Fix ambient temperature if the trend is environmental rather than local.

Reduce the thermal load (the fix for a workload-thermal mismatch)

  • Reduce write intensity during thermal events. Writes generate more heat than reads. Shedding or deferring the heavy write job lets the drive cool and restores performance. This is also the correct first response during an active event.
  • Move sustained heavy jobs off the hot drive or reschedule them to cooler windows, if the drive simply cannot sustain the required throughput within its thermal envelope.
  • Right-size the hardware. If a workload legitimately needs sustained throughput that the drive cannot deliver without throttling, the fix is a drive with a higher thermal envelope (enterprise form factors with proper cooling), not more tuning.

Tradeoff to be aware of: reducing load works immediately but only treats the symptom. If the root cause is a missing heatsink or failed fan, the problem returns with the next heavy job.

Prevention

  • Monitor NVMe temperature alongside CPU temperature. This is the mistake that makes this incident class invisible. Composite temperature plus the warning_temp_time counter should be baseline telemetry on every host with local NVMe.
  • Know your thresholds at provisioning time. Record WCTEMP and CCTEMP from nvme id-ctrl for each drive model in the fleet. Alert at roughly 10C below WCTEMP under peak load so you get warning before throttling starts.
  • Heatsink every M.2 drive that will see sustained load. Treat it as part of the build, not an upgrade.
  • Trend temperature over weeks. A slow upward drift usually means degrading cooling (dust, fan wear) long before the first throttle event.
  • Watch the TMT and time-above-threshold counters on drives that support them; they are the honest record of how much of the drive’s life has been spent throttled.

How Netdata helps

  • Netdata collects composite temperature per device (nvme.device_composite_temperature) so the temperature trend sits on the same timeline as the block device throughput and latency charts, making the temperature-to-performance correlation visible in one view instead of two tools.
  • The warning and critical composite temperature time charts (nvme.device_warning_composite_temperature_time, nvme.device_critical_composite_temperature_time) surface chronic thermal stress history, including events that happened while nobody was looking at a gauge.
  • Thermal management transition and time charts (nvme.device_thermal_mgmt_temp1_transitions_rate, nvme.device_thermal_mgmt_temp2_transitions_rate, and the corresponding time charts) show when the drive is actively entering throttling states.
  • The per-bit critical warning chart (nvme.device_critical_warnings_state) isolates the temperature bit from the other critical warning bits, so a transient thermal trip is not confused with spare exhaustion or read-only mode.
  • Because temperature is a cumulative-counter and poll-based signal, per-second collection of the block device side (IOPS, throughput) fills in the live symptom picture between SMART updates.