The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / smartctl-disk-monitoring / smartctl-host-io-errors-clean-smart ▌

Operations Guides

I/O errors in dmesg with clean SMART: the failure the drive can't see

I/O error, dev sda scrolling through dmesg. The application is timing out on disk reads. You run smartctl -H /dev/sda and it returns PASSED. Reallocated sectors, pending sectors, offline uncorrectable: all zero. The ATA error log is empty.

SMART reports what the drive firmware can observe about itself: media integrity, mechanical health, thermal state, NAND endurance. It cannot see failures in the transport layer between the host and the drive. When the failure lives in the SATA cable, the backplane connector, the HBA firmware, a SCSI error recovery loop, or a PCIe link, the drive firmware has no way to observe it. The host kernel sees every failed transaction. The drive does not.

smartctl is not the source of truth for this class of failure. A monitoring stack that watches only SMART attributes will miss these failures entirely, and you will discover them when an application breaks.

What this means

The kernel’s SCSI mid-layer responds to transport and controller failures through error recovery (EH). When a command times out or returns an error sense, the kernel initiates EH, which can reset the device, the bus, or the host adapter. During EH, all I/O to the affected device freezes, and often all devices sharing the same controller freeze as well. This produces multi-second latency spikes that look like total system hangs to applications.

flowchart TD
    A["dmesg: I/O errors
smartctl: PASSED"] --> B{"UDMA CRC 199
increasing?"} B -->|Yes| C["Cable or backplane
transport fault"] B -->|No| D{"Multiple drives
on same HBA?"} D -->|Yes| E["HBA or controller
level fault"] D -->|No| F{"dmesg shows
reset or timeout?"} F -->|Yes| G["Controller firmware hang
or drive unresponsive"] F -->|No| H["Bus-level or
protocol error"]

Common causes

CauseWhat it looks likeFirst thing to check
SATA/SAS cable or backplane degradationUDMA CRC Error Count (ID 199) increasing. dmesg shows ataX: hard resetting link, link speed downshifts. SMART media attributes stay at zero.smartctl -A /dev/sdX | grep UDMA_CRC for increasing count
HBA or controller firmware hangDID_TIME_OUT in kernel sense data. task abort and device reset messages. May affect all drives on the same controller simultaneously.dmesg for task abort, reset, EH complete sequences
Drive controller firmware bugCommands time out intermittently. Drive may disappear and reappear. SMART stays clean because the diagnostic controller is the component malfunctioning.dmesg for device removal and re-adding events
SCSI error recovery loopRepeated EH cycles. I/O freezes for seconds at a time across all devices on a controller. Log fills with reset and recovery messages.dmesg for repeated reset or recovery sequences
Bus-level error (PCIe for NVMe)NVMe Error Information log is clean. Kernel logs PCIe AER errors or controller reset messages. SMART/Health log shows no Critical Warning bits.dmesg for AER or pcieport messages

Quick checks

# Check kernel ring buffer for I/O errors and recovery actions
dmesg | grep -iE "I/O error|medium error|reset|timeout|offline|task abort|device not responding" | tail -40

# Verify SMART health assessment and media attributes are actually clean
smartctl -H /dev/sdX
smartctl -A /dev/sdX | grep -iE "Reallocated|Current_Pending|Offline_Uncorrectable|UDMA_CRC"

# Check drive-side ATA error log for abort, CRC, or timeout entries
smartctl -l error /dev/sdX
# smartctl prints CCTO only when the drive logs a command-timeout error entry

# Check current vs negotiated SATA link speed
smartctl -a /dev/sdX | grep -i "SATA Version"

# For NVMe: check Error Information log and Critical Warning
smartctl -l error /dev/nvme0n1
smartctl -A /dev/nvme0n1 | grep "Critical Warning"

# Check per-device I/O latency for the suspect drive
iostat -x 1 | grep sdX

# Check if the device is still present
lsblk | grep sdX

How to diagnose it

  1. Confirm the pattern. Verify that smartctl -H returns PASSED and that media attributes (IDs 5, 197, 198) are zero or stable. Then confirm the kernel is logging I/O errors for the same device. If both are true, you have a host-side failure that SMART cannot see.

  2. Check UDMA CRC Error Count (ID 199). If it is increasing, the failure is in the physical transport layer: cable, connector, or backplane. This is the most common cause and the most commonly misdiagnosed as a drive failure.

  3. Determine scope. Are errors affecting one drive or multiple drives on the same controller? Multiple drives points to HBA firmware, backplane, or power. A single drive points to that drive’s controller, its cable, or its port.

  4. Read the SCSI sense data. The kernel logs structured sense information after failed commands. Look for hostbyte values: DID_TIME_OUT means the HBA gave up waiting for the drive to respond. DID_ERROR means a bus-level or host adapter error occurred. driverbyte DRIVER_SENSE means the drive returned an error sense, which narrows the problem toward the drive rather than the transport.

  5. Check for SATA link resets and speed downshifts. Messages like ataX: hard resetting link followed by SATA link up X Gbps indicate the kernel is recovering from a bus error. If the negotiated speed is lower than the drive’s maximum, the link has downshifted due to accumulated errors. This is a strong indicator of cable or connector degradation.

  6. Check whether the device has been marked dead. The kernel logs rejecting I/O to dead device after repeated EH failures. At this point, the block layer stops accepting new I/O. The drive may still respond to SMART pass-through commands because SMART commands take a different kernel path than block I/O.

  7. For NVMe, check PCIe errors separately. The NVMe Error Information log may show zero entries while the kernel logs PCIe AER corrections or controller resets. These are PCIe link or controller issues, not NAND issues. Check dmesg for pcieport or AER messages.

Metrics and signals to monitor

SignalWhy it mattersWarning sign
Kernel I/O error rate (dmesg)The primary signal for this failure class. SMART cannot see these errors.Any I/O error, medium error, task abort, or reset message for a specific device
UDMA CRC Error Count (ID 199)The one SMART attribute that directly reflects transport health rather than media healthIncreasing count, especially after a maintenance event
Device presence (/dev/sdX exists)Detects complete drive disappearance from the busDevice node that was previously present is now absent
iostat await per deviceSCSI EH freezes manifest as latency spikes before any error counter movesawait spiking to seconds on a specific device while CPU is idle
SATA link speedDownshift from 6 Gbps to 3 Gbps or lower indicates accumulated bus errorsNegotiated speed below drive capability
SCSI EH frequencyEach EH cycle freezes I/O for the affected controllerRepeated reset or recovery messages within a short window

Fixes

Cable or backplane transport fault

Reseat the SATA or SAS cable at both ends. If CRC errors continue incrementing, swap with a known-good cable. Move the drive to a different port or bay to isolate whether the fault is the cable, the backplane port, or the drive’s connector. CRC errors are cumulative and never reset, so judge by whether the count is still increasing after the cable change, not by the absolute value.

HBA or controller firmware hang

Check the HBA vendor’s firmware changelog for known timeout or reset bugs. Update HBA firmware if a relevant fix exists. If the issue affects all drives on one controller, move drives to a different HBA to confirm the controller is the fault. For RAID controllers, check the controller’s own event log, which may show more detail than the kernel exposes.

Drive controller firmware bug

Check the drive manufacturer’s support site for firmware updates. Some firmware versions cause intermittent command timeouts without setting SMART failure bits. If a firmware update is available, apply it during a maintenance window. If the drive disappears and reappears intermittently, replace it: this pattern tends to worsen without warning, and the drive’s own diagnostics cannot self-assess a controller that is malfunctioning.

SCSI error recovery loop

If EH cycles are frequent but the drive eventually recovers each time, the issue may be a marginal link or a drive that takes too long on certain commands. Increasing the kernel’s SCSI command timeout can reduce false EH triggers, but this masks the underlying problem. The real fix is to address the root cause: cable, firmware, or failing controller.

Check PCIe slot seating. Reseat the NVMe drive. Check for PCIe AER errors in dmesg. If the motherboard or slot is faulty, move the drive to a different slot. Check for BIOS or firmware updates that address PCIe link stability for your platform.

Prevention

Baseline UDMA CRC Error Count at deployment. CRC errors are cumulative and never reset. Without a baseline, you cannot distinguish a historical count from an active problem. Capture the value at deployment and alert on growth, not on absolute value.

Track SATA link speed over time. A link that downshifts from 6 Gbps to 3 Gbps has accumulated transport errors. This is a leading indicator of cable or connector degradation that precedes outright failure.

Schedule regular extended self-tests. Self-tests force the drive to read every sector, surfacing latent media defects before production I/O hits them. A drive that passes extended self-tests but still generates kernel I/O errors is exhibiting a transport or controller problem, not a media problem.

Correlate across drives in the same chassis. When multiple drives on the same controller show kernel I/O errors simultaneously, the root cause is shared infrastructure: HBA, backplane, or power. Individual drive monitoring misses this pattern. Fleet-level correlation surfaces it.

How Netdata helps

  • Netdata collects kernel log events and disk-level metrics per second, so you can correlate a burst of dmesg I/O errors with the exact moment await spikes on the affected device, even for transient events that resolve before a human sees them.
  • SMART attribute collection runs alongside disk performance metrics in the same timeline, so you can confirm in seconds whether the drive’s firmware agrees with the kernel about what is happening.
  • The disk metrics collector tracks per-device I/O latency, queue depth, and error rates from /proc/diskstats, giving you the host-side view that SMART cannot provide.
  • Cross-device correlation makes it visible when multiple drives on the same controller start showing errors simultaneously, pointing to shared infrastructure rather than individual drive failure.