The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / oracle-database / oracle-database-db-file-sequential-read ▌

Operations Guides

Oracle 'db file sequential read': single-block index reads and buffer cache misses

db file sequential read is the dominant single-block I/O wait event in Oracle OLTP. Each time a foreground process needs one block, finds it missing from the buffer cache, and waits for the read from a datafile into the SGA, the session accrues time on this event. The name is historical: “sequential” refers to the single-block read into a specific buffer cache slot, not to a sequential scan pattern. Multiblock scans are tracked separately as db file scattered read.

The event sits in the User I/O wait class. It is normal and unavoidable for index-driven OLTP. What matters is the average latency per read and the share of total DB time the event consumes. A healthy NVMe-backed system typically sustains averages under 1ms per read; a SAN-backed system under 10ms. When the average climbs or the event dominates the wait profile, the bottleneck is either storage latency, a buffer cache that no longer fits the working set, or execution plans doing far more single-block lookups than the workload should require.

What the event represents

A db file sequential read wait begins when a foreground server process issues a single-block physical read and blocks until that read completes. On Linux, these reads typically use a synchronous pread() system call; the wait time is the elapsed time of that one read, from syscall issue to completion.

The three wait parameters identify exactly which block was read:

  • P1 = file# (absolute file number, joinable to V$DATAFILE)
  • P2 = block# (block number within that file)
  • P3 = blocks (almost always 1 for this event; that is the defining trait)

When P2 is 1, the read targets a datafile header. Header reads happen during file opens, checkpoints, and backups and are normal, but a flood of them on slow storage can become a metadata bottleneck.

The classic driver is an index-driven lookup that follows TABLE ACCESS BY INDEX ROWID. The index walk yields rowids; each rowid points at a table block; if that block is not in the buffer cache, the session pays one db file sequential read. Undo block reads during read-consistent queries are a second, easily missed source: a long-running query reconstructing older block versions issues single-block reads against undo tablespace datafiles, and those wait on the same event. Reads of control file blocks and other metadata also surface here.

A related event, read by other session, covers the case where a second session wants a block that a first session is currently reading from disk. Before Oracle 10.1, that scenario was folded into buffer busy waits. After the split, the first session to miss the cache accrues db file sequential read, and every subsequent session waiting for the in-flight read accrues read by other session. Seeing both climb together is a strong signal of many sessions hitting the same hot blocks.

flowchart TD
    A[Session needs one block] --> B{In buffer cache?}
    B -- hit --> C[Logical read, no wait]
    B -- miss --> D[Issue pread syscall]
    D --> E[db file sequential read wait starts]
    E --> F[Block returned into cache]
    F --> G[Wait ends, session resumes]
    H[Other session wants same block] --> I[read by other session wait]
    I --> F

Where it shows up in production

Normal and expected:

  • OLTP index lookups on a working set that mostly fits the buffer cache. Most reads hit cache; the misses show up here at low average latency.
  • Undo reads during read-consistent queries, especially long-running reports against a busy OLTP instance.
  • Datafile header reads during routine operations.

Worth investigating:

  • The event’s total time crosses roughly 30% of DB time and is trending up. That points at either a shrinking effective cache or a workload doing more index-driven block fetches than before.
  • Average latency exceeds storage class expectations (see thresholds below). Storage latency is the usual culprit, but I/O scheduler or filesystem behavior can also be the cause.
  • The event appears during what should be a full table scan. Oracle can fall back to single-block reads during a cache-read tablescan or index fast full scan when the blocks still needed are scattered and not contiguous, so db file sequential read can dominate a scan you expected to see as db file scattered read.

A common silent driver is a high clustering factor on a frequently used index. When DBA_INDEXES.CLUSTERING_FACTOR approaches NUM_ROWS, adjacent index keys point at table blocks spread across the segment, so a small number of index entries forces a large number of TABLE ACCESS BY INDEX ROWID single-block reads. The index looks fine; the access pattern is the problem.

Starting in Oracle Database 11g, Oracle can choose direct path read for serial full scans of large segments, bypassing the buffer cache entirely. When that happens, scan I/O moves off db file scattered read and db file sequential read and onto direct path read. Do not assume a drop in db file sequential read means less I/O; it may mean the I/O moved events.

On Exadata, the storage cells service single-block reads, and the equivalent event is cell single block physical read. Smart scan offloading means many reads never surface as either event. If you are interpreting wait profiles on Exadata, look for the cell-prefixed event, not the db-file-prefixed one.

Interpreting latency and DB time share

Average latency per read is the first number to read. Typical operator thresholds:

Storage classNormal averageInvestigateCritical
Flash / NVMe<1ms>3ms>10ms
SSD<5ms>10ms>20ms
SAN<10ms>15ms>20ms
Spinning disk<15msvariesvaries

These are averages. The distribution matters more. A storage subsystem with a healthy average but occasional 50ms+ outliers is usually queueing under burst load, and per-second latency visibility catches what a 5-minute average hides.

The second number is the event’s share of DB time. A practical escalation threshold is average latency above 10ms on SSD or above 20ms on SAN, sustained. For proactive tracking, the trigger is total db file sequential read time exceeding roughly 30% of DB time and trending up. If the event is the number-one non-idle wait on an OLTP system and growing, the system is becoming I/O-bound on single-block reads.

Two failure modes look similar but resolve differently:

  • Latency rising at roughly constant wait count: storage degradation. Compare with V$FILESTAT.AVGIOTIM per datafile and OS-level iostat await on the underlying devices.
  • Wait count rising at roughly constant latency: more cache misses or more index-driven access. Check buffer cache hit ratio trend, working set growth, and whether a high-frequency SQL changed plans.

Querying the event directly

These are safe to run on a production instance.

-- Average latency and total time for the event (system level)
SELECT EVENT, TOTAL_WAITS, TIME_WAITED_MICRO,
       ROUND(TIME_WAITED_MICRO/NULLIF(TOTAL_WAITS,0)/1000, 2) AS avg_ms
FROM V$SYSTEM_EVENT
WHERE EVENT = 'db file sequential read';
-- Current sessions waiting on the event right now
SELECT SID, SERIAL#, SQL_ID, P1 AS file_id, P2 AS block_id, SECONDS_IN_WAIT
FROM V$SESSION
WHERE EVENT = 'db file sequential read' AND STATE = 'WAITING';
-- Per-file physical read latency (AVGIOTIM is in milliseconds)
SELECT f.FILE#, d.NAME, f.PHYRDS, f.AVGIOTIM
FROM V$FILESTAT f JOIN V$DATAFILE d ON f.FILE# = d.FILE#
ORDER BY f.AVGIOTIM DESC;
-- Top SQL by buffer gets: high gets/exec with index access often drives this event
SELECT SQL_ID, PLAN_HASH_VALUE, EXECUTIONS,
       BUFFER_GETS / NULLIF(EXECUTIONS, 0) AS gets_per_exec,
       ELAPSED_TIME / NULLIF(EXECUTIONS, 0) / 1000 AS ms_per_exec
FROM V$SQL
WHERE EXECUTIONS > 0
ORDER BY BUFFER_GETS DESC
FETCH FIRST 20 ROWS ONLY;  -- 12c+; use ROWNUM <= 20 on 11g
-- Buffer cache hit ratio (context signal, not primary diagnostic)
SELECT
  ROUND(
    (1 - (SELECT VALUE FROM V$SYSSTAT WHERE NAME = 'physical reads')
       / NULLIF((SELECT VALUE FROM V$SYSSTAT WHERE NAME = 'db block gets')
              + (SELECT VALUE FROM V$SYSSTAT WHERE NAME = 'consistent gets'), 0)
    ) * 100, 2
  ) AS buffer_cache_hit_ratio
FROM DUAL;

For session-level and historical drill-down, V$ACTIVE_SESSION_HISTORY and the AWR repository are the right tools, but both require the Diagnostics Pack license on Enterprise Edition. Without that license, rely on V$SYSTEM_EVENT, V$SESSION, V$SQL, and V$FILESTAT.

Signals to watch in production

SignalWhy it mattersWarning sign
db file sequential read average latencyDirect storage-latency indicator for random single-block readsRising above storage-class threshold at roughly constant wait count
db file sequential read as % of DB timeShows whether the event is the dominant time sinkCrossing roughly 30% of DB time and trending up
V$FILESTAT.AVGIOTIM per datafileLocalizes latency to specific filesOne or two files with AVGIOTIM well above the rest
Buffer cache hit ratio trendContext for whether misses are growingSteady decline over weeks with stable workload
read by other session waitsReveals hot blocks with many concurrent waitersClimbing in step with db file sequential read
V$SQL buffer gets per executionCatches plan regressions doing extra index-driven fetchesTop SQL gets/exec jumps 10x or more
DBA_INDEXES.CLUSTERING_FACTOR vs NUM_ROWSDiagnoses scattered table access via indexClustering factor near NUM_ROWS on a hot index

How Netdata helps

  • Per-second wait-event latency reveals single-block read average latency at the granularity where storage queueing actually shows up, rather than smoothed away in a 5-minute average.
  • Correlating db file sequential read average latency with OS-level disk await and IOPS on the same dashboard separates a storage problem (latency rising everywhere) from a database problem (latency stable, wait count rising).
  • Trending the event’s share of DB time alongside buffer cache hit ratio shows whether a growing cache miss rate is the driver, which points at working-set growth rather than storage degradation.
  • Pairing this event with read by other session on one view surfaces hot-block contention: both climbing together means many sessions converging on the same blocks.
  • SQL-level buffer-gets-per-execution trends catch the plan regressions that quietly multiply single-block reads before they become a page.

Netdata’s Oracle Database monitoring brings these signals together with per-second metrics and ML anomaly detection.

The Netdata solution

Oracle Database monitoring with Netdata

Netdata monitors Oracle Database with per-second metrics and automatic dashboards. Watch wait events, redo and archive-log activity, tablespace and undo space, and session and lock activity so the failure modes in these runbooks surface before the instance hangs.