The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / oracle-database / oracle-database-db-file-scattered-read ▌

Operations Guides

Oracle 'db file scattered read': multiblock reads, full scans, and plan regressions

A sudden spike in db file scattered read wait time on an OLTP database is one of the most reliable signals of an execution plan regression. The wait event itself is benign on analytics and warehouse workloads, where multiblock full scans are the expected access path. On a transactional system it usually means a query that used to do a handful of index reads is now scanning whole tables.

This guide covers the failure pattern, the path from wait event to offending SQL_ID, and the tradeoffs in the common fixes. It is scoped to single-instance and RAC databases doing buffered multiblock reads. From 11g onward, many large serial scans bypass the cache via direct path read instead; that event is covered where it affects diagnosis.

What this means

db file scattered read is the wait event Oracle posts when a server process issues a multiblock read for up to DB_FILE_MULTIBLOCK_READ_COUNT contiguous blocks and scatters them into non-contiguous slots in the buffer cache. The default for DB_FILE_MULTIBLOCK_READ_COUNT is platform-dependent and typically capped by the OS maximum I/O size. The name refers to buffer placement, not the on-disk pattern. The I/O itself is sequential.

The event fires for:

  • Full table scans (FTS) on segments small enough that the optimizer chose the buffered read path.
  • Index fast full scans (FFS) reading the index segment in storage order rather than walking the b-tree.
  • Some index range or full index scans that use optimizer-driven index prefetch. The read can batch logically adjacent leaf blocks; the observed block count is not necessarily DB_FILE_MULTIBLOCK_READ_COUNT, and some batches may post db file parallel read instead.

From 11g onward, many large serial scans bypass the buffer cache via direct path read and post that wait event instead. As a result, db file scattered read typically undercounts total full scan activity on modern releases. A system with very low scattered read waits can still be drowning in physical reads done under direct path read. Check both events.

The operational question is not “are scattered reads happening” but “did they start happening on a workload where they do not belong”. On an OLTP system, db file scattered read becoming a top-3 wait event is a regression marker until proven otherwise. On a warehouse, the same signal is the workload.

Common causes

CauseWhat it looks likeFirst thing to check
Plan regressionOne or two SQL_IDs with new PLAN_HASH_VALUE, BUFFER_GETS per exec 10x or higher, scattered read time concentrated on those SQL_IDsV$SQL ordered by BUFFER_GETS, compare PLAN_HASH_VALUE history
Missing index on a new query pathScattered reads on a specific segment that recently started receiving traffic; no prior plan baseline for the SQLV$SEGMENT_STATISTICS for the table, new SQL in V$SQL ordered by FIRST_LOAD_TIME
Stale or changed optimizer statisticsOnset correlates with end of the DBMS_STATS auto-gather maintenance windowAlert log and job history for gather_stats_job, DBA_TAB_STATISTICS.LAST_ANALYZED
Buffer cache too small for working setScattered reads across many segments, no single SQL_ID dominates, hit ratio declining over weeksBuffer cache hit ratio trend, V$SGA_DYNAMIC_COMPONENTS resize history
Data volume growth on a previously indexed pathSame plan as before, but rows per exec climbing, scans on larger and larger segment sizesDBA_TABLES.NUM_ROWS history, segment growth in DBA_SEGMENTS

The first three are incident-response cases. The last two are slow-burn capacity issues that look like incidents when a threshold is crossed.

Quick checks

All queries below are read-only and safe to run on a production instance.

-- System-level wait time and average latency
SELECT EVENT, TOTAL_WAITS, TIME_WAITED_MICRO,
       ROUND(TIME_WAITED_MICRO/NULLIF(TOTAL_WAITS,0)/1000, 2) AS avg_ms
FROM V$SYSTEM_EVENT
WHERE EVENT = 'db file scattered read';
-- Where scattered reads rank among non-idle waits right now
SELECT NVL(WAIT_CLASS, 'ON CPU') AS wait_class, EVENT, COUNT(*) AS sessions
FROM V$SESSION
WHERE STATUS = 'ACTIVE' AND TYPE = 'USER' AND WAIT_CLASS != 'Idle'
GROUP BY NVL(WAIT_CLASS, 'ON CPU'), EVENT
ORDER BY COUNT(*) DESC
FETCH FIRST 15 ROWS ONLY;
-- Top SQL by logical reads (the usual regression offenders)
SELECT SQL_ID, PLAN_HASH_VALUE, EXECUTIONS,
       BUFFER_GETS / NULLIF(EXECUTIONS, 0) AS gets_per_exec,
       ELAPSED_TIME / NULLIF(EXECUTIONS, 0) / 1000 AS ms_per_exec,
       SUBSTR(SQL_TEXT, 1, 120) AS sql_preview
FROM V$SQL
WHERE EXECUTIONS > 0
ORDER BY BUFFER_GETS DESC
FETCH FIRST 20 ROWS ONLY;
-- Segment-level physical reads (which table is being scanned)
SELECT OWNER, OBJECT_NAME, OBJECT_TYPE, VALUE
FROM V$SEGMENT_STATISTICS
WHERE STATISTIC_NAME = 'physical reads'
ORDER BY VALUE DESC
FETCH FIRST 20 ROWS ONLY;
-- SQL_IDs with multiple plan hashes (plan instability)
SELECT SQL_ID, COUNT(DISTINCT PLAN_HASH_VALUE) AS plan_count
FROM V$SQL
GROUP BY SQL_ID
HAVING COUNT(DISTINCT PLAN_HASH_VALUE) > 1
ORDER BY plan_count DESC
FETCH FIRST 20 ROWS ONLY;
-- Sessions currently waiting on scattered read, with SQL_ID and blocker
SELECT SID, SERIAL#, USERNAME, EVENT, SECONDS_IN_WAIT, SQL_ID, BLOCKING_SESSION
FROM V$SESSION
WHERE EVENT = 'db file scattered read' AND STATE = 'WAITING'
ORDER BY SECONDS_IN_WAIT DESC;
-- Compare scattered reads vs direct path reads vs single-block reads on the same instance.
-- Note: 'direct path read' also counts temp I/O, so correlate with TEMP usage before attributing.
SELECT EVENT, TOTAL_WAITS, TIME_WAITED_MICRO,
       ROUND(TIME_WAITED_MICRO/NULLIF(TOTAL_WAITS,0)/1000, 2) AS avg_ms
FROM V$SYSTEM_EVENT
WHERE EVENT IN ('db file scattered read', 'direct path read', 'db file sequential read');

How to diagnose it

  1. Confirm scattered reads are the dominant signal. Run the second quick-check query. If db file scattered read is not in the top 3 non-idle waits, this is not the right incident.
  2. Identify the offending segment. Use V$SEGMENT_STATISTICS with STATISTIC_NAME = 'physical reads'. A single table or index dominating is the regression signature. Many segments with similar read counts is a cache-sizing or workload-shift problem.
  3. Identify the offending SQL. Cross-reference the segment from step 2 with the top-SQL-by-gets query. The same SQL_ID should appear at the top of both. If the SQL_ID has multiple PLAN_HASH_VALUEs in V$SQL, the regressed plan is the one with high gets_per_exec.
  4. Verify the plan change. Compare the current plan with the previous one. On a licensed system, DBA_HIST_SQL_PLAN gives the historical plan. Without the Diagnostics Pack, the previous plan may already be aged out of V$SQL_PLAN.
  5. Check for a triggering event. Look at the alert log and DBA_TAB_STATISTICS.LAST_ANALYZED around the onset time. Statistics gathering is the most common trigger. Parameter changes, index drops or invisibility, and version upgrades also cause regressions.
  6. Decide on a fix path. If the previous plan is known and the SQL_ID is identified, a SQL Plan Baseline is the cleanest fix. If the plan must be forced urgently, a SQL Profile or SQL Patch is faster. If the index is genuinely missing, create it. Each path has tradeoffs covered below.
flowchart TD
    A["db file scattered read in top waits"] --> B{"Single segment dominates?"}
    B -- "Yes" --> C["Find SQL_ID via V$SQL by gets"]
    B -- "No" --> D["Check buffer cache size and working set growth"]
    C --> E{"Multiple PLAN_HASH_VALUE?"}
    E -- "Yes" --> F["Plan regression. Compare to old plan."]
    E -- "No" --> G["Missing index or stats-driven scan cost"]
    F --> H["SQL Plan Baseline or SQL Profile"]
    G --> I["Add index or fix statistics"]
    D --> J["Grow cache, isolate workload, or partition"]

Metrics and signals to monitor

SignalWhy it mattersWarning sign
db file scattered read wait time in V$SYSTEM_EVENTDirect measure of full-scan cost on the buffered pathBecomes a top-3 non-idle wait on an OLTP system
db file scattered read average msIndicates storage latency for multiblock I/OAvg above 10ms sustained on SSD-class storage means storage contention, not plan regression
direct path read wait timeSibling event for large scans that bypass the cacheSpikes without a corresponding scattered-read spike can still indicate a scan regression
Logical reads per second from V$SYSSTATTotal work the database is doing2x baseline sustained usually means plan regression
BUFFER_GETS per EXECUTIONS for top SQL_IDsPer-execution cost change, isolates regression from volume changeGreater than 10x increase from baseline for a SQL_ID with stable execution count
V$SEGMENT_STATISTICS physical readsIdentifies which segment is being scannedOne table’s read count an order of magnitude above peers
V$SQL.INVALIDATIONSPredicts parse storm and plan instability after stats gatheringSudden spike on critical SQL_IDs after maintenance window
Buffer cache hit ratioContext only, not a primary signalSudden 10-point drop correlating with performance degradation

Average latency is the key signal for separating storage problems from plan problems. If scattered-read average wait time is in the tens of milliseconds, the storage layer is the bottleneck. If average wait is normal but total wait time is high, the database is doing too many scans.

Fixes

The right fix depends on the cause. All of these assume the regressed SQL has already been identified via the diagnostic steps above.

Restore the known-good plan

If you have a known-good PLAN_HASH_VALUE from before the regression, capture it as a SQL Plan Baseline so the optimizer cannot deviate from it.

-- Load the known-good plan from the cursor cache.
-- This pins optimizer behavior for the SQL_ID going forward; test before applying in production.
BEGIN
  DBMS_SPM.LOAD_PLANS_FROM_CURSOR_CACHE(
    sql_id          => '&good_sql_id',
    plan_hash_value => &good_plan_hash
  );
END;
/

SQL Plan Baselines are the intended stability mechanism. They persist across restarts and survive statistics gathering. The downside is adoption overhead: every critical SQL_ID needs to be captured proactively, not reactively. If you only enable baselines after a regression, you need the old plan still in the cursor cache or in AWR.

For an urgent incident where the previous plan is still in the cursor cache, a SQL Profile or SQL Patch can be applied faster than a baseline and will hold the system while a baseline is built.

Fix the missing index

If the diagnostic shows a query doing a full scan on a table where the predicate columns have no supporting index, the fix is to add the index. Before creating it:

  • Verify the predicate is stable and selective. A full scan on a low-cardinality column is sometimes the correct plan.
  • Check that the same SQL is not also scanning other large tables. A join order regression can manifest as a single scan but have multiple offenders.
  • Use CREATE INDEX ... ONLINE to avoid blocking DML during the build. Expect brief contention on the table during the build regardless.

Watch for enq: TM - contention after creating indexes on tables with unindexed foreign keys. See the related guide on TM contention and unindexed FKs.

Address statistics

If the regression coincides with a stats-gather job, the cleanest path is to lock statistics on the affected table at the known-good state and re-gather only with a staged approach.

-- Lock statistics on the table to prevent auto-gather from changing them.
-- Locking is safe and reversible via DBMS_STATS.UNLOCK_TABLE_STATS.
EXEC DBMS_STATS.LOCK_TABLE_STATS('SCHEMA', 'TABLE_NAME');

Do not disable statistics gathering database-wide. That creates a slower, larger regression later. Lock at the table level, document why, and revisit on a planned change window.

Tuning the scan decision directly

DB_FILE_MULTIBLOCK_READ_COUNT controls how many blocks each scattered read fetches. Increasing it makes full scans cheaper per block and can make the optimizer prefer scans. Lowering it makes scans more expensive and biases the optimizer toward indexes. Treat this as a system-level nudge, not a fix for a specific regression.

OPTIMIZER_INDEX_COST_ADJ (default 100) makes index access paths appear cheaper relative to full scans when set below 100. Setting it too low causes the inverse problem: index scans where full scans would be cheaper, with db file sequential read dominating instead.

Both parameters are blunt instruments. Use them for a known workload class on a known database, not as a triage response to a single incident.

Forcing buffered reads with event 10949

On systems where direct path reads are causing problems (PGA pressure, repeated disk reads on cached data), event 10949 forces the buffered scattered-read path for serial full scans.

-- Session-level: disable serial direct path reads. Reversible by disconnecting the session.
ALTER SESSION SET EVENTS '10949 TRACE NAME CONTEXT FOREVER, LEVEL 1';

Oracle’s 19c and 21c documentation explicitly recommends event 10949 to disable direct path read, so it is documented on those releases. Its interaction with undocumented _serial_direct_read is version-specific; validate the selected path with the session event counters or SQL trace before relying on it.

This is a workaround, not a fix. Buffered reads pollute the cache with scan data and can displace hot OLTP blocks. It is most useful as a temporary measure on a mixed-workload system where a specific scan is causing PGA pressure.

Prevention

  • Capture SQL Plan Baselines proactively for top SQL. Reactive baselining only works if the old plan is still in the cursor cache.
  • Monitor BUFFER_GETS divided by EXECUTIONS for the top 20 SQL_IDs. A 10x change is the earliest reliable regression signal.
  • Stage statistics gathering. Use DBMS_STATS.DIFF_TABLE_STATS_IN_STALE or an equivalent staging approach to compare plans before publishing new stats.
  • Do not rely on buffer cache hit ratio. It is one of the most misleading Oracle metrics. Oracle’s cache-ratio formula uses physical reads cache and cache logical-read counters, while aggregate physical-read statistics include direct and process-private-buffer I/O, so a workload shifting to direct path can evade a naive cache-ratio drop. Wait events are the correct primary signal.
  • Track the direct path read threshold. The decision between buffered scattered reads and direct path reads depends on internal small-table thresholds, buffer cache size, and segment size, and the logic has changed across versions. Oracle does not document a single stable per-release cutoff; after a major upgrade, observe which scans shift paths with wait events and execution plans.

How Netdata helps

  • The Oracle integration collects per-second wait-event latency including db file scattered read, direct path read, and db file sequential read, so you can see the shift between buffered and direct path reads in real time rather than reconstructing it from AWR samples.
  • ML-based anomaly detection on BUFFER_GETS per execution for top SQL surfaces plan regressions within seconds of the new plan being chosen, before the wait-event totals grow enough to trigger static thresholds.
  • Correlating scattered read waits with OS-level disk latency (per-device await, queue depth) separates “the storage is slow” from “the optimizer chose a bad plan” without a second tool.
  • The same integration tracks logical reads per second, TPS, and active sessions, so a plan regression is visible as a correlated jump across all three signals rather than as a single wait-event spike.
  • Per-PDB resource metrics in multitenant deployments isolate which tenant’s workload is driving the scans.
The Netdata solution

Oracle Database monitoring with Netdata

Netdata monitors Oracle Database with per-second metrics and automatic dashboards. Watch wait events, redo and archive-log activity, tablespace and undo space, and session and lock activity so the failure modes in these runbooks surface before the instance hangs.