The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / postgres / postgres-sequential-scan-on-large-table

Operations Guides

PostgreSQL sequential scan on a large table: when to add an index and when not to

Seeing Seq Scan on a large table in EXPLAIN does not mean the planner is wrong. Adding a B-tree index often makes the query slower, burdens every write path with index maintenance, and wastes storage. PostgreSQL’s planner compares the estimated cost of reading the table sequentially against the estimated cost of traversing an index and fetching rows from the heap. There is no hardcoded row-percentage threshold. On SSD-backed servers, the default cost parameters are frequently stale, so the planner may be wrong in either direction.

What the planner is actually comparing

For every candidate scan path, the planner computes an abstract cost using statistics from ANALYZE and GUC parameters.

Sequential scan cost:

seq_page_cost * table pages + cpu_tuple_cost * rows scanned

Index scan cost:

random_page_cost * index pages visited + random_page_cost * heap pages fetched + cpu_tuple_cost * rows retrieved

The planner picks the cheaper path. The widely cited five-to-ten-percent rule of thumb is emergent behavior from the default seq_page_cost (1.0) and random_page_cost (4.0) on typical hardware, not a hardcoded threshold. The 4.0 default was calibrated for spinning disks. On NVMe or SSD-backed instances, random I/O latency is close enough to sequential I/O that this assumption is outdated. When random_page_cost is left at 4.0 on all-flash storage, the planner overestimates the cost of index scans and falls back to sequential scans for queries that would benefit from an index.

EXPLAIN (ANALYZE, BUFFERS) SELECT * FROM events WHERE created_at > '2025-01-01';

How the cost model decides

flowchart TD
    A[Query received] --> B[Estimate rows returned]
    B --> C{Usable index exists?}
    C -->|No| D[Plan: Seq Scan]
    C -->|Yes| E[Estimate index scan cost]
    E --> F[random_page_cost * index pages + heap fetches]
    B --> G[Estimate seq scan cost]
    G --> H[seq_page_cost * table pages + cpu_tuple_cost * rows]
    F --> I{Index cost < Seq cost?}
    H --> I
    I -->|Yes| J[Plan: Index Scan]
    I -->|No| D

If no index can satisfy the predicate, the planner reads the table sequentially. If an index exists, the planner estimates how many rows match the filter and how scattered the matching rows are across heap pages. For a low-selectivity predicate on a large table, an index scan might touch many heap pages at random. Under the default random_page_cost of 4.0, that random access looks expensive, so the planner prefers a sequential scan. Lowering random_page_cost toward 1.1 or 2.0 on SSD-only storage can flip the plan to an index scan.

Between the two extremes, the planner may choose a bitmap index scan. PostgreSQL scans the index to build a bitmap of matching heap pages, then reads those pages in physical order. This converts random heap access into a more sequential pattern, often beating both a pure index scan and a full sequential scan for moderate selectivity. Parallel bitmap heap scans go further: the leader builds the bitmap while workers read the heap in parallel. The underlying index scan itself is not parallelized.

Parallel sequential scans add another variable. Since PostgreSQL 9.6, the planner can assign multiple workers to scan non-overlapping ranges of the same table. This reduces the effective per-query cost of a sequential scan. The planner only considers parallelism for tables larger than min_parallel_table_scan_size (default 8 MB). On large tables, a parallel sequential scan can outrun an index scan even for moderately selective queries, particularly when the index is not covering and would require many heap lookups.

PostgreSQL 17 introduces a streaming I/O interface that batches multiple read requests during sequential scans, bitmap heap scans, and vacuum. This lowers per-call overhead and makes sequential scans faster than in prior versions. The planner does not account for this at the SQL level, but the observed effect is that sequential scans are more competitive relative to index scans. If you upgrade to PostgreSQL 17 and see more Seq Scan nodes, the planner may not be broken; the underlying sequential read path simply got faster.

Where this shows up in production

SSDs with a stale random_page_cost. A cloud instance backed by NVMe may still have random_page_cost set to 4.0. The planner sees random heap fetches as disproportionately expensive and chooses sequential scans for queries that return as little as three to eight percent of the table. Lowering random_page_cost to 1.1 or 2.0 for SSD-only storage often corrects the bias. On mixed storage tiers, setting it too low causes the planner to choose index scans that perform poorly when data spills to slower disks.

LIMIT clauses with bad estimates. The planner discounts the estimated cost of an index scan when a LIMIT clause is present, assuming it can stop after fetching a fraction of matching rows. If the actual cardinality is much higher than the estimate, the index scan degrades badly. This is not a case where the sequential scan was better; it is a case where the index was chosen based on bad statistics. The correct fix is usually a higher statistics target or a partial index, not index removal.

Broad reporting queries. A quarterly summary that filters a 500 GB event table and returns fifteen to twenty percent of rows is often faster with a sequential scan, especially if PostgreSQL parallelizes it. Forcing an index scan here increases random I/O and CPU overhead without reducing the row count.

Small or memory-resident tables. When a table fits entirely in shared_buffers or the OS page cache, a sequential scan is essentially a memory scan. The planner knows this through effective_cache_size and may correctly prefer a Seq Scan even when an index exists, because the cost difference between random and sequential access collapses in RAM.

Mixed storage tiers. If your database resides on a volume tier that mixes SSD cache with spinning disk, setting random_page_cost universally to 1.1 tells the planner that random I/O is cheap everywhere. When a query touches data aged out to spinning disk, an index scan becomes far more expensive than estimated. Keep random_page_cost conservative in these environments, or use tablespaces to isolate hot data.

When to add an index, and when to leave the seq scan alone

Add an index when the query pattern is stable and selective:

  • The predicate returns a small fraction of the table. Under default cost parameters, the emergent threshold is roughly under five to ten percent, but verify with EXPLAIN rather than trusting the rule.
  • You can build a covering index using INCLUDE that eliminates heap fetches entirely and enables an index-only scan.
  • You can build a partial index that matches a selective, recurring predicate. Partial indexes are smaller to maintain and more likely to stay in cache.
  • The query is high-frequency OLTP and latency-sensitive.

Do not add an index blindly:

  • If the query returns more than roughly ten to fifteen percent of rows, sequential I/O is usually more efficient than random heap lookups.
  • If the table is write-heavy and the query is rare. Every additional index slows INSERT, UPDATE, and DELETE because PostgreSQL must maintain the index tuple and write WAL for it.
  • If the table is small or fits almost entirely in RAM. A sequential scan from memory is fast, and the planner may be correct to prefer it.
  • If the query cannot match a partial index you already have. Adding another broad index is over-indexing, which consumes space and write bandwidth.

A common misuse is setting enable_seqscan to off. This does not disable sequential scans; it assigns them an artificially high cost so the planner prefers any alternative. It is a diagnostic flag for verifying whether an index path exists, not a tuning knob. Using it in production hides the real problem, which is usually stale statistics or a random_page_cost that does not match your storage.

Another misuse is indexing low-cardinality columns like a status field with three values. If the filter matches thirty percent of rows, the index will not beat a sequential scan, yet you still pay the write and vacuum overhead.

Signals to watch in production

SignalWhy it mattersWarning sign
pg_stat_user_tables.seq_scan vs idx_scanSustained sequential scans on large tables can mean missing indexes, or legitimate cost decisionsSelective queries show rising seq_scan and near-zero idx_scan
EXPLAIN estimated vs. actual rowsUnderestimation causes the planner to prefer a seq scan when an index is better; overestimation causes the oppositeEstimated rows differ from actual by more than 10x
random_page_cost settingDefault of 4.0 misleads the planner on SSD/NVMe storage, biasing it toward seq scansValue is 4.0 on all-SSD instances with no spinning disk tier
pg_stat_user_tables.idx_scan for a new indexConfirms the planner is actually using the indexidx_scan remains 0 over multiple days after creation
pg_stat_statements.stddev_time / mean_timeBimodal latency from plan flapping between seq scan and index scanRatio exceeds 1.0 for the same query text
# Check whether an index is being used
SELECT schemaname, relname, seq_scan, idx_scan
FROM pg_stat_user_tables
WHERE relname = 'events';

How Netdata helps

Cross-reference these signals in Netdata to decide whether a sequential scan is a problem or a correct plan:

  • Correlate pg_stat_user_tables.seq_scan counts with disk I/O metrics. Rising sequential scans alongside saturated disk read throughput indicate the scan is hitting physical storage. Flat disk I/O means the scan is likely memory-resident and harmless.
  • Track query latency percentiles. A correct sequential scan on a cached table does not produce latency spikes; a sequential scan that evicts shared_buffers does.
  • Monitor buffer cache hit ratios. A drop in blks_hit / (blks_hit + blks_read) alongside rising seq_scan counts suggests scans are pushing the working set out of cache.
  • Check table-level scan trends over time to verify whether a newly created index reduced sequential scans or simply added write overhead.
  • Cross-reference autovacuum and dead tuple metrics with query statistics to distinguish a missing-index problem from bloat that makes sequential scans slower than they should be.
The Netdata solution

PostgreSQL monitoring with Netdata

Netdata monitors PostgreSQL with per-second metrics, pre-built dashboards, and ML-powered anomaly detection. Correlate connection saturation, lock waits, autovacuum progress, replication lag, and checkpoint I/O against the rest of your stack so you catch the incidents in these runbooks before they page anyone.