The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / proxysql / proxysql-query-execution-interrupted ▌

Operations Guides

ProxySQL error 1317 Query execution was interrupted: timeout-killed queries

MySQL error 1317 (“Query execution was interrupted”) means the backend reported an interrupted query. ProxySQL’s own query-timeout path opens a separate backend connection, issues KILL QUERY <thread_id>, and returns ProxySQL error 1907 (“Query execution was interrupted, query_timeout exceeded”), not 1317.

The question is whether 1317 is a healthy safety valve catching runaway queries, or a symptom of backend degradation killing queries that should normally succeed. Raising a timeout is cheap, but masking backend slowness with a higher ceiling only delays the problem.

The error surfaces in stats_mysql_errors with hostgroup, hostname, port, username, and schemaname context. The diagnostic path: confirm the error, identify which timeout fired, determine whether the killed queries are genuinely slow, and decide whether to tune the timeout or fix the backend.

What this means

ProxySQL tracks execution time for every query it sends to a backend. Four mechanisms can trigger a kill:

  1. mysql-default_query_timeout (global variable, default 86400000 ms = 24 hours). This ProxySQL timeout returns error 1907, not backend error 1317.
  2. mysql_query_rules.timeout (per-rule override). Like the global timeout, this ProxySQL timeout returns error 1907.
  3. Query annotations. An individual query can carry a timeout in a SQL comment (SELECT /*+ ;query_timeout=100 */ ...); this also uses ProxySQL’s timeout path.
  4. mysql-max_transaction_time (global variable, default 14400000 ms = 4 hours). Sessions with open transactions exceeding this duration are killed; this is a session termination path, not a backend KILL QUERY that yields 1317.

When ProxySQL’s timeout path fires, the client receives error 1907 and the killed query is not retried even if mysql-query_retries_on_failure (default 1) is set. Backend error 1317 is therefore a separate investigation path: it can come from the backend, a DBA KILL, or maintenance behavior.

flowchart TD
    A["Error 1317 in
stats_mysql_errors"] --> B{"Is this ProxySQL's
timeout path?"} B -->|"Yes: returns 1907"| C["Global:
mysql-default_query_timeout"] B -->|"Yes: returns 1907"| D["Per-rule:
mysql_query_rules.timeout"] B -->|"Yes: returns 1907"| E["Annotation:
query_timeout in SQL comment"] B -->|"No"| F["Backend interruption,
DBA KILL, or maintenance"] C --> G{"Are Slow_queries and
per-backend latency rising?"} D --> G E --> G F --> G G --> H["Yes: backend degraded
locks, I/O, bad plan"] G --> I["No: timeout threshold
too low for workload"] G --> J["Overflow bug?
Check ProxySQL version"]

Common causes

CauseWhat it looks likeFirst thing to check
Backend genuinely slow1317 correlates with rising Slow_queries, high per-backend Latency_us, histogram tail shift toward cnt_1s or cnt_10sstats_mysql_query_digest for the slowest queries by sum_time
Timeout too aggressive1317 appears after a config change; queries that previously completed now get killedruntime_mysql_query_rules for recently changed timeout values
ProxySQL timeout overflow (not backend 1317)Long timeout values above ~35 min in mysql_query_rules cause ProxySQL-timeout queries to end after ~2 secondsProxySQL version and issue #2765 status; test the deployed version
Backend shutdown ambiguity1317 during maintenance; some MySQL versions report 1317 instead of 1053 on graceful shutdownWhether a backend was being drained or restarted when errors appeared

Quick checks

All commands connect to the ProxySQL admin interface (default port 6032) and are read-only. Replace <password> with your admin credentials, or omit -p to be prompted interactively.

# Error 1317 entries with full hostgroup/user context
mysql -u admin -p<password> -h 127.0.0.1 -P 6032 \
  -e "SELECT * FROM stats_mysql_errors WHERE errno=1317 ORDER BY last_seen DESC LIMIT 20;"
# Global timeout and retry variables
mysql -u admin -p<password> -h 127.0.0.1 -P 6032 \
  -e "SELECT * FROM global_variables WHERE variable_name IN ('mysql-default_query_timeout','mysql-max_transaction_time','mysql-query_retries_on_failure');"
# Query rules with a timeout set
mysql -u admin -p<password> -h 127.0.0.1 -P 6032 \
  -e "SELECT rule_id, match_digest, match_pattern, timeout, destination_hostgroup, active FROM runtime_mysql_query_rules WHERE timeout IS NOT NULL AND timeout > 0 ORDER BY rule_id;"
# Slow queries vs total questions for ratio context
mysql -u admin -p<password> -h 127.0.0.1 -P 6032 \
  -e "SELECT Variable_Name, Variable_Value FROM stats_mysql_global WHERE Variable_Name IN ('Slow_queries','Questions','generated_error_packets');"
# Command latency histogram tail
mysql -u admin -p<password> -h 127.0.0.1 -P 6032 \
  -e "SELECT Command, Total_cnt, Total_Time_us, cnt_100ms, cnt_500ms, cnt_1s, cnt_5s, cnt_10s, cnt_INFs FROM stats_mysql_commands_counters WHERE Total_cnt > 0;"
# Per-backend monitor latency (ping, NOT query latency)
mysql -u admin -p<password> -h 127.0.0.1 -P 6032 \
  -e "SELECT hostgroup, srv_host, srv_port, status, Latency_us, ConnUsed, ConnFree, ConnERR FROM stats_mysql_connection_pool;"
# Top queries by total execution time
mysql -u admin -p<password> -h 127.0.0.1 -P 6032 \
  -e "SELECT hostgroup, schemaname, username, digest_text, count_star, sum_time, max_time FROM stats_mysql_query_digest ORDER BY sum_time DESC LIMIT 20;"
# ProxySQL version (check for overflow bug)
mysql -u admin -p<password> -h 127.0.0.1 -P 6032 \
  -e "SELECT * FROM global_variables WHERE variable_name='admin-version';"

How to diagnose it

  1. Confirm the error and get context. Query stats_mysql_errors for errno=1317. Note count_star (cumulative error count), hostgroup, username, and schemaname. If the error is concentrated in one hostgroup or user, the problem is specific to that traffic class. Stats are in-memory and reset on ProxySQL restart.

  2. Determine which timeout fired. Cross-reference the affected hostgroup and query patterns against runtime_mysql_query_rules. If a rule with a low timeout matches the killed queries, that rule is the source. If no rule has a timeout, the global mysql-default_query_timeout applies. Check whether queries carry /*+ ;query_timeout=N */ annotations in the application code.

  3. Check whether the killed queries are genuinely slow. Look at stats_mysql_query_digest for the specific query patterns being killed. Compare max_time against the configured timeout. If max_time consistently exceeds the timeout, the query is genuinely slow and the timeout is catching a real problem. If max_time is well below the timeout but queries still die, suspect the overflow bug or another mechanism.

  4. Check per-backend latency and health. Use stats_mysql_connection_pool to see if one backend has significantly higher Latency_us than others in the same hostgroup. A backend with ConnERR > 0 or SHUNNED status may be the root cause, with 1317 as a downstream symptom. Latency_us is the monitor’s ping latency, not query execution time. Use it to detect network or protocol-level degradation, not query slowness.

  5. Check the histogram tail. In stats_mysql_commands_counters, look for counts accumulating in cnt_1s, cnt_5s, cnt_10s, or cnt_INFs buckets. A shift toward these buckets confirms backend-level execution degradation. The histogram is cumulative since stats reset, so compare two consecutive readings to get interval-based rates.

  6. Check the ProxySQL version. If ProxySQL-timeout rules above approximately 2,100,000 ms (about 35 minutes) cause queries to end after roughly 2 seconds, test against issue #2765. That timeout-overflow issue remains open, so current releases should not be assumed fixed. This symptom belongs to ProxySQL’s timeout path, not backend error 1317.

  7. Distinguish safety valve from symptom. If Slow_queries is rising and histogram tail buckets are accumulating, the backend is degraded. Fix the backend: query optimization, index tuning, lock investigation. If queries complete normally elsewhere and only specific patterns hit 1317, the timeout threshold may be too low for the workload.

Metrics and signals to monitor

SignalWhy it mattersWarning sign
stats_mysql_errors (errno=1317)Direct count of timeout-killed queries per hostgroup/userSustained increase above baseline
Slow_queries rateCorrelates with timeout kills; confirms backend slownessRising rate proportional to 1317 count
stats_mysql_commands_counters histogram tailShows queries landing in multi-second bucketscnt_1s, cnt_5s, cnt_10s counts increasing
Per-backend Latency_usNetwork/protocol latency divergence between backendsOne backend more than 5x peers in same hostgroup
stats_mysql_query_digest max_timeShows whether killed queries are genuinely slowmax_time approaching or exceeding configured timeout
ConnERR per backendBackend unreachable or rejecting connectionsSustained increase on specific backend
mysql-default_query_timeout and rule timeoutThe actual threshold in effectUnexpectedly low value, or recent config change

Fixes

Backend is genuinely slow

The timeout is working correctly. The fix is on the backend, not in ProxySQL.

  • Identify slow query patterns via stats_mysql_query_digest sorted by sum_time descending.
  • Check the MySQL backend directly: SHOW PROCESSLIST, SHOW ENGINE INNODB STATUS, slow query log, EXPLAIN on the top digests.
  • Look for lock contention, missing indexes, table scans on large tables, or I/O saturation.
  • If the slow query is an intentional batch or ETL job, route it to a dedicated hostgroup with a higher timeout rather than raising the global limit for all traffic.

Timeout is too aggressive

If queries that previously completed are now killed after a config change:

  • Check runtime_mysql_query_rules for the affected query patterns and their timeout values.
  • Raise the timeout to accommodate the slowest acceptable query in that class. Tradeoff: a higher timeout means runaway queries run longer before being killed, consuming backend resources and holding connections.
  • Avoid setting mysql-default_query_timeout extremely high as a blanket fix. Set targeted per-rule timeouts that match the expected execution profile of each query class.
  • After changing: LOAD MYSQL QUERY RULES TO RUNTIME; SAVE MYSQL QUERY RULES TO DISK;

ProxySQL timeout overflow (not backend 1317)

If a mysql_query_rules.timeout above approximately 2,100,000 ms (about 35 minutes) causes ProxySQL-timeout queries to end after roughly 2 seconds, this is the integer overflow pattern in issue #2765. The issue remains open, so benchmark your deployed version rather than assuming a fixed release. The workaround is to keep per-rule timeout values below the affected range and rely on mysql-default_query_timeout for long-running queries; expect ProxySQL timeout to return 1907, not 1317.

Backend shutdown reported as 1317

Some MySQL versions return error 1317 instead of 1053 during a graceful shutdown. ProxySQL does not retry 1317-killed queries. If this happens during planned maintenance:

  • Accept that queries in flight during shutdown will fail.
  • If using OFFLINE_SOFT to drain a backend, wait for ConnUsed to reach zero before switching to OFFLINE_HARD.
  • Application-level retry logic should treat 1317 as retryable during maintenance windows, since ProxySQL will not retry it.

Prevention

  • Baseline the Slow_queries to Questions ratio. A sustained increase is the earliest indicator that backend degradation will start producing 1317 errors.
  • Set per-rule timeouts deliberately. Match the timeout to the query class: short timeouts for OLTP reads, longer timeouts for reporting queries.
  • Monitor stats_mysql_errors for new error codes. A new errno appearing that was absent from baseline signals a new failure mode.
  • Keep ProxySQL updated. The overflow bug and retry behavior are version-dependent. Document version-specific behavior in your runbook.
  • Watch for repeated KILL QUERY entries in the ProxySQL log. When a query times out, ProxySQL may log multiple KILL attempts for the same thread_id, each followed by error 1317. This is normal behavior, not a bug, but can inflate log volume.

How Netdata helps

  • Per-second Slow_queries rate reveals backend degradation developing before it produces enough 1317 errors to trigger application-level alerts.
  • stats_mysql_errors breakdown by errno shows 1317 counts with hostgroup and user context, so you can see whether the problem is isolated to one traffic class or systemic.
  • stats_mysql_commands_counters histogram shows the tail-latency shift toward cnt_1s and cnt_10s buckets, confirming that killed queries were genuinely slow rather than victims of an overly aggressive timeout.
  • Per-backend Latency_us and ConnERR correlate 1317 errors with specific backend degradation, separating “backend is slow” from “timeout is wrong.”
  • Questions rate provides the denominator for error-rate calculations. A spike in 1317 means something different at 10,000 queries per second than at 100.
  • ML anomaly detection on Slow_queries and generated_error_packets can flag a degradation trend before it crosses a static threshold, providing lead time before 1317 errors reach application-visible volume.