The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / smartctl-disk-monitoring / smartctl-nvme-available-spare ▌

Operations Guides

NVMe Available Spare below threshold: the spare block pool is running out

When smartctl -A /dev/nvme0n1 reports Available Spare below the Available Spare Threshold, the drive’s internal spare block pool is running low. The controller is reporting less reserved NAND capacity than it considers safe for continued reliable operation.

Available Spare is the percentage of reserved NAND blocks remaining for replacing worn or failed blocks. It starts at 100% and decreases monotonically as the drive consumes spares. When it reaches 0%, the next bad block causes permanent data loss for that block’s data: the drive has no spare to remap to.

Alerting logic:

  • Below vendor-set threshold: TICKET. Plan replacement urgently.
  • 0% with corroborating signals (Media and Data Integrity Errors rising, Critical Warning bit 3 active, or SMART Overall Health FAILED): PAGE. The drive is in active failure. A drive may sit at 0% spare and still function, but the next bad block starts data loss.

What this means

NVMe drives reserve a portion of their total NAND capacity as spare blocks. When a NAND block fails or wears out, the controller retires it and maps a spare block in its place. This remapping is transparent to the host OS. Available Spare reports what percentage of that reserve remains.

Key properties:

  • Monotonically decreasing. Available Spare never goes back up. Spares consumed are consumed permanently. A secure erase resets the FTL mapping table but does not bring retired NAND blocks back into the spare pool.
  • Independent of Percentage Used. A drive can report 50% Percentage Used but only 5% Available Spare if bad blocks consumed the spare pool faster than normal wear would predict. Do not assume that moderate Percentage Used means Available Spare is fine.
  • Vendor-set threshold varies widely. The Available Spare Threshold is set by the manufacturer and is not standardized at 10%. Always read the actual threshold value for your specific drive.

The degradation curve is cliff-edged. The drive operates normally while spares are available. When the last spare is consumed, the next defect becomes an uncorrectable read or write error. There is no graceful degradation: the transition from functional to data loss can happen quickly.

When Available Spare drops below the threshold, the NVMe controller sets bit 0 (0x01) of the Critical Warning byte. This is the hardware-level signal that the drive itself considers its spare situation critical.

flowchart TD
    A["Available Spare below threshold"] --> B{"Spare at 0%?"}
    B -->|No| C["TICKET: plan replacement"]
    B -->|Yes| D{"Media Errors rising?"}
    D -->|Yes| E["PAGE: active data loss"]
    D -->|No| F{"Read-only bit 3 set?"}
    F -->|Yes| E
    F -->|No| G{"Overall health FAILED?"}
    G -->|Yes| E
    G -->|No| C

Common causes

CauseWhat it looks likeFirst thing to check
Normal NAND endurance exhaustionPercentage Used approaching or above 100%, Data Units Written approaching rated TBW, Available Spare declining graduallyCompare Data Units Written against the drive datasheet rated TBW
Defective NAND consuming spares faster than wearPercentage Used moderate (30-60%) but Available Spare already low, no corresponding high write volumeCheck Media and Data Integrity Errors count for growth
High write amplificationPercentage Used climbing faster than expected from host writes, Available Spare declining rapidlyInvestigate workload pattern: small random writes, TRIM not enabled, drive near full
Manufacturing defect on a new driveAvailable Spare below 100% or below threshold from first observation, low power-on hoursCheck whether the value was below 100% at deployment baseline

Quick checks

# Read Available Spare and threshold together
smartctl -A /dev/nvme0n1 | grep "Available Spare"

# Check Critical Warning byte (bit 0 = spare below threshold, bit 3 = read-only)
smartctl -A /dev/nvme0n1 | grep "Critical Warning"

# Check Media and Data Integrity Errors
smartctl -A /dev/nvme0n1 | grep "Media and Data Integrity Errors"

# Check Percentage Used (endurance consumed)
smartctl -A /dev/nvme0n1 | grep "Percentage Used"

# Check Data Units Written (host write volume)
smartctl -A /dev/nvme0n1 | grep "Data Units Written"

# Check overall health assessment
smartctl -H /dev/nvme0n1

# Check kernel logs for I/O errors or read-only transitions
dmesg | grep -iE "nvme|I/O error|read-only" | tail -20

If your NVMe drive is behind a USB-to-NVMe bridge, you may need bridge-specific device types to read the SMART/Health log:

# JMicron, ASMedia, or Realtek USB-to-NVMe bridges
smartctl -d sntjmicron -A /dev/sdX | grep "Available Spare"
smartctl -d sntasmedia -A /dev/sdX | grep "Available Spare"
smartctl -d sntrealtek -A /dev/sdX | grep "Available Spare"

The nvme-cli tool provides the same fields with slightly different names. Note it targets the controller device, not the namespace:

nvme smart-log /dev/nvme0 | grep -iE "available_spare|percentage_used"

How to diagnose it

  1. Confirm the Available Spare value and the threshold. Read both values from smartctl -A. If Available Spare is 8% and the threshold is 10%, the drive is below threshold but not at zero. If Available Spare is 8% and the vendor threshold is, for example, 50%, the situation is far more urgent than the raw percentage suggests.

  2. Check the Critical Warning byte. If bit 0 (0x01) is set, the controller is confirming the spare situation is critical. If bit 3 (0x08) is also set, the drive has gone read-only. If bit 2 (0x04) is set, the controller considers NVM subsystem reliability degraded.

  3. Check Media and Data Integrity Errors. If this counter is increasing alongside declining Available Spare, the drive is actively losing blocks and encountering data errors simultaneously. This confirms active failure, not just aged capacity.

  4. Compare Available Spare against Percentage Used. If Percentage Used is 60% but Available Spare is 3%, the spare pool is being consumed much faster than normal wear predicts. This points to defective NAND or high write amplification rather than simple endurance exhaustion.

  5. Calculate actual endurance consumed from Data Units Written. Each NVMe Data Units Written unit equals 512,000 bytes (1000 x 512). Multiply the reported value by 512,000 to get total bytes written, then compare against the drive datasheet’s rated TBW. If you have consumed only 40% of rated TBW but Available Spare is critically low, the drive is failing prematurely.

  6. Check kernel logs for I/O errors or read-only transitions. A drive at 0% spare that starts producing write errors or goes read-only is in terminal failure. Evacuate data immediately.

  7. Estimate runway. Track Available Spare over time to project when it will reach 0%: (Current Available Spare) / (Rate of decline per week) = weeks remaining. This requires at least two data points separated by enough time to measure the trend reliably.

Metrics and signals to monitor

SignalWhy it mattersWarning sign
Available SpareDirect measure of remaining spare NAND capacity. The primary health indicator for spare pool status.Below vendor threshold, or rate of decline accelerating
Available Spare ThresholdVendor-set floor below which the controller flags critical. Not all drives use 10%.Must be read per-drive, never hardcoded in alert logic
Critical Warning byteHardware-level escalation from the controller. Bit 0 fires when spare drops below threshold.Any non-zero value requires investigation
Media and Data Integrity ErrorsConfirms data loss at the NAND level. Corroborates that the drive is actively failing, not just aged.Increasing from baseline
Percentage UsedVendor estimate of endurance consumed. Contextualizes whether low spare is from normal wear or premature failure.Disproportionately high relative to Available Spare
Data Units WrittenRaw host write volume. Enables runway calculation against rated TBW.Write rate increasing, accelerating endurance consumption
Composite TemperatureHigh temperature accelerates NAND wear and data retention loss, which can accelerate spare consumption.Sustained above WCTEMP (vendor-defined warning threshold)

Fixes

Replacement planning (primary action)

Available Spare never increases. Once below threshold, the only real fix is replacing the drive. The question is how urgently.

  • Below threshold but above 0%: Order a replacement. Schedule migration during a maintenance window. The drive may continue operating for weeks or months, but reliability is no longer guaranteed.
  • At 0% with corroborating signals (Media Errors rising, read-only bit 3 active, or health FAILED): treat as active failure. Begin data evacuation immediately if the drive is still readable.

Reduce write volume (buying time)

If replacement hardware is not immediately available, reducing write load extends the time before the spare pool fully exhausts:

  • Move write-heavy workloads (database WAL, application logs, swap) to another drive.
  • Enable TRIM if not already active (fstrim -v /mountpoint). This helps the controller reclaim invalidated pages, reducing write amplification.
  • Reduce the drive’s capacity utilization if it is above 80%. Nearly-full SSDs have higher write amplification because garbage collection has less free space to work with.

This does not reverse the damage. It slows the rate of spare consumption while you procure a replacement.

Do not attempt to repair the spare pool

There is no SMART command, firmware utility, or secure erase that restores Available Spare. The consumed spare blocks are permanently retired NAND. A secure erase or format operation resets the FTL mapping table but does not revive dead blocks.

Prevention

Baseline at deployment. Capture a full SMART snapshot when each drive is first deployed. Record the initial Available Spare value. If a new drive shows Available Spare below 100% at deployment, that may indicate factory defects already consumed some spares. Establish the baseline so you can distinguish “shipped that way” from “developed in production.”

Track rate of change, not just absolute value. A drive at 15% Available Spare that has been stable for 6 months is less urgent than a drive at 20% that dropped from 30% in the last month. Alerting on absolute values alone misses the acceleration signal that distinguishes stable historical damage from active decline.

Monitor Available Spare from day one. This is a Level 2 (Operational) signal in the SMART monitoring maturity model. Teams that only check Available Spare when drives start failing miss the runway they need for orderly replacement.

Use smartd automated checks. The -H directive checks the SMART health status, including the Critical Warning byte for NVMe devices. For per-field NVMe monitoring, smartmontools 7.5 (2025-04-30) added experimental -p reporting for Available Spare and -u reporting for Percentage Used and Media and Data Integrity Errors.

Schedule extended self-tests. Extended self-tests force reads across the entire media surface, surfacing latent bad blocks before production I/O hits them. Weekly short tests and monthly extended tests are common practice.

How Netdata helps

  • SMART attribute collection detects Available Spare decline promptly rather than waiting for the next manual check.
  • Rate-of-change tracking on Available Spare catches acceleration: a drive dropping from 20% to 15% over two weeks is flagged differently from one sitting stable at 15% for months.
  • Correlation with Media and Data Integrity Errors, Critical Warning bits, and Percentage Used in a single timeline confirms whether low Available Spare is normal wear or active failure without running multiple commands and comparing outputs manually.
  • Anomaly detection on write volume (Data Units Written) can flag unexpected write amplification burning spare capacity faster than the workload alone would predict.
  • Host-side I/O metrics (latency, errors) alongside SMART data catches failure modes where the drive’s own reporting lags behind what the kernel is experiencing.