The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / smartctl-disk-monitoring / smartctl-self-test-read-failure ▌

Operations Guides

Self-test completed: read failure - a bad sector found by proactive scanning

When smartctl -l selftest /dev/sdX shows “Completed: read failure”, the drive’s firmware found a sector it cannot read during an active surface scan. The LBA_of_first_error column gives you the exact logical block address of the defect. The firmware tried multiple times, exhausted its error correction, and could not recover the data at that location.

The extended self-test scans the entire media surface. Without it, a bad sector remains hidden until production I/O hits that exact LBA, producing an application-visible I/O error, a hung process, or a kernel timeout instead of a diagnostic warning.

The data at the reported LBA is lost unless you have redundancy (RAID, replication, or a checksumming filesystem like ZFS or Btrfs that can self-heal). The drive has a problem. The questions are: how bad is it, is it spreading, and how fast do you need to replace the drive.

What this means

“Completed: read failure” means the drive’s internal surface scan hit a sector where the read failed after the firmware’s standard retry and ECC recovery cycle. The Remaining column tells you how far into the scan the defect was found.

The key fields in the self-test log:

  • Status: “Completed: read failure” confirms the failure type.
  • Remaining: Percentage of the test that did not run. “90%” remaining means the test failed after scanning roughly 10% of the surface.
  • LBA_of_first_error: Logical block address (in 512-byte sectors, starting at zero) where the read failed. This is the defect location.
  • LifeTime(hours): Power-on hour count when the test ran, giving you a timeline.

The log reports only the first error encountered. The Remaining field shows where the firmware stopped; later sectors were not tested or listed by that run.

The self-test reports the first bad sector it encounters. If Remaining shows a high percentage, the defect was found early. There may be additional bad sectors further along the media that the test never reached.

A read failure in the self-test log does not tell you whether the sector was reallocated. The firmware may or may not have remapped it to a spare. Check Current_Pending_Sector, Reallocated_Sector_Ct, and Offline_Uncorrectable to understand the current state of the defect.

Common smartctl self-test statuses:

StatusMeaningAction
Completed without errorMedia surface is readable end to endNone. Strong evidence of media integrity.
Completed: read failureFirmware could not read a sector after retries and ECCInvestigate immediately. Note the LBA.
Completed: servo/seek failureMechanical positioning system failed during scan (HDD)Mechanical problem. Plan replacement.
Completed: electrical failureInternal electrical fault detectedHardware fault. Plan replacement.
Aborted by hostTest was cancelled by the system or operatorReschedule. Not a drive problem.
Interrupted (host reset)System rebooted or bus reset during testReschedule. Not a drive problem.

A passing extended test (“Completed without error” with 00% remaining and no LBA) is strong evidence of media integrity across the full surface. A failing one gives you the exact defect LBA, which is actionable intelligence you cannot get any other way without waiting for production I/O to hit the bad sector.

Common causes

CauseWhat it looks likeFirst thing to check
Progressive media degradationRead failure at one LBA; Current_Pending_Sector or Reallocated_Sector_Ct non-zero or risingRate of change in IDs 5, 197, 198 over time
Physical shock or vibrationRead failure after a physical event; G-Sense_Error_Rate may have increasedIDs 221/191 and recent physical events
SSD NAND cell failureRead failure on an SSD; Percentage Used or wear indicator trending toward limitsNVMe Percentage Used or ATA wear leveling attributes
Manufacturing defectSingle read failure early in drive life, stable afterwardCompare against deployment baseline snapshot
Thermal damageRead failure alongside elevated temperature historySCT temperature log for sustained high temps

Quick checks

These commands are safe and read-only.

# Check self-test log: note the LBA_of_first_error and Remaining %
smartctl -l selftest /dev/sdX

# Check error log for UNC errors at the same LBA
smartctl -l error /dev/sdX

# Check media integrity attributes
smartctl -A /dev/sdX | grep -iE "Reallocated|Current_Pending|Offline_Uncorrect"

# Check overall health assessment
smartctl -H /dev/sdX

# Check kernel logs for I/O errors on this device
dmesg | grep -iE "I/O error|medium error" | grep sdX | tail -20

# For NVMe: check media errors and spare capacity
smartctl -A /dev/nvme0n1 | grep -iE "Media and Data|Available Spare|Percentage Used"

How to diagnose it

flowchart TD
    A["Self-test shows
read failure at LBA"] --> B["Check IDs 197, 198, 5"] B --> C{"Pending 197 or
Uncorrectable 198 rising?"} C -- Yes --> D["Active media degradation
plan drive replacement"] C -- No --> E["Run another extended test"] E --> F{"Same LBA fails again?"} F -- Yes --> D F -- No --> G["Single transient event
monitor for recurrence"]
  1. Record the LBA and Remaining percentage. Save this for comparison after the next test.

  2. Check Current_Pending_Sector (ID 197). If non-zero, the failed sector is in the pending queue awaiting reallocation. A write to that LBA would force the firmware to attempt reallocation. If the value is zero, the sector may have already been reallocated or was transient.

  3. Check Reallocated_Sector_Ct (ID 5). If it increased from your baseline, the firmware already remapped the bad sector to a spare. The data at the original LBA is gone, but the drive compensated. Track how many spares have been consumed.

  4. Check Offline_Uncorrectable (ID 198). If it increased, the drive confirmed the sector is permanently unreadable. This is confirmed data loss at the media level. Attribute names, raw encodings, and IDs can vary between manufacturers, so verify the decoded attribute name and drivedb.h preset rather than relying solely on the ID number.

  5. Check the ATA error log. Run smartctl -l error /dev/sdX and look for UNC (uncorrectable) errors. If the error log shows UNC errors at the same LBA as the self-test failure, the defect is confirmed from multiple angles. The ATA summary error log holds only 5 entries; use smartctl -l xerror for the extended log if available.

  6. Run another extended test. Start a new test with smartctl -t long /dev/sdX. This takes hours on large HDDs. Compare the new result:

    • Same LBA fails again: persistent physical defect.
    • Different LBA fails: multiple bad sectors, or a failing head/arm assembly on an HDD.
    • Test passes: the original failure may have been transient (vibration, power glitch), or a write to the sector forced reallocation and cleared the defect.
  7. Map the LBA to a filesystem object (optional). The BadBlockHowto from the smartmontools project describes the procedure for translating a raw LBA to a filesystem block and identifying the affected file. If you run ZFS or Btrfs, a scrub will report checksum errors on the affected files directly.

Metrics and signals to monitor

SignalWhy it mattersWarning sign
Self-test result (smartctl -l selftest)Proactive way to find latent bad sectors before production I/O hits themAny non-passing result
Current_Pending_Sector (ID 197)Sectors that failed read but await reallocationAny non-zero value, especially sustained across polls
Offline_Uncorrectable (ID 198)Confirmed permanent data loss at media levelAny increase from baseline
Reallocated_Sector_Ct (ID 5)Sectors the firmware has already remapped to sparesAny growth, especially accelerating
ATA error log UNC entriesDrive-side record of uncorrectable read errorsUNC errors at LBAs matching self-test failures
SMART overall health (smartctl -H)Drive’s binary self-assessmentFAILED means the drive considers itself dying
I/O latency (iostat await, kernel logs)Host-side impact of bad sector retriesawait spikes to seconds when reading near bad LBAs

Fixes

Single isolated defect, drive otherwise healthy

If the read failure is at one LBA, Current_Pending_Sector is non-zero but small, and no other attributes are rising, you can attempt to force reallocation. Writing to the pending LBA triggers the firmware to attempt a remap to a spare sector. If the write succeeds, the sector drops off the pending list and Reallocated_Sector_Ct increments by one.

This is a bandaid, not a repair. The underlying media degraded enough to produce an unreadable sector. Forcing reallocation clears the symptom but consumes a spare from a finite pool. On a production drive, plan replacement regardless.

Warning: Any procedure that writes directly to a specific LBA is destructive. The data at that LBA is already unreadable, but you must ensure you are targeting the correct sector and not corrupting adjacent data. The smartmontools BadBlockHowto documents the safe procedure: map the LBA to a filesystem block, verify the mapping, and write only that block.

Active media degradation (multiple signals)

If Current_Pending_Sector or Offline_Uncorrectable are non-zero and rising alongside the self-test failure, the drive is in active decline. The spare pool is being consumed. Do not attempt sector-by-sector repair. Replace the drive.

Steps:

  1. Verify all backups and redundancy for this drive are current.
  2. If the drive is in a RAID array, initiate a controlled replacement (add spare, rebuild) rather than waiting for an uncontrolled failure during peak load.
  3. If the drive is standalone, migrate data immediately and schedule replacement.
  4. After replacement, run an extended self-test on the new drive during the first 24-48 hours. RAID rebuilds stress-test replacement drives and can surface latent manufacturing defects.

Self-test keeps getting aborted

If the self-test log shows repeated “Aborted by host” or “Interrupted (host reset)” entries, the test is not finishing. Extended self-tests compete with host I/O for the drive’s command queue, and heavy production load can starve the test. This is a scheduling problem, not a drive problem. Schedule extended tests during low-load windows. The smartd daemon can automate scheduled tests in smartd.conf using the -s directive.

Prevention

Schedule periodic extended self-tests. Drives do not run self-tests automatically. Without scheduled tests, latent bad sectors remain hidden until production I/O hits them. A monthly extended test is standard practice; a weekly short test catches mechanical and electrical issues but only scans a limited portion of the media.

Baseline drives at deployment. Capture a full SMART snapshot when a drive enters service. This lets you distinguish “shipped with 3 reallocated sectors from factory” from “developed 3 reallocated sectors in production.”

Track rate of change, not absolute values. A drive with 10 reallocated sectors accumulated over 5 years is stable. A drive with 2 reallocated sectors gained this week is actively degrading. Growth rate is the most actionable signal for predicting failure timeline.

Check self-test results after every run. A self-test whose results are never checked provides no value. Automate result collection and alert on any non-passing result.

Use checksumming filesystems. ZFS and Btrfs scrubs read every block, surfacing latent defects the same way an extended self-test does. A scrub that triggers reallocated sector growth is revealing damage that already existed, not causing it.

How Netdata helps

Netdata’s SMART monitoring collects the attributes that matter for this failure mode:

  • Rate-of-change on IDs 5, 197, 198: Instead of alerting on absolute values (which produces false alarms on drives with historical counts), Netdata tracks growth over time. A single new reallocated sector in a 24-hour window is flagged; a stable count from years ago is not.
  • Correlation with I/O latency: When a self-test finds a bad sector, Netdata can correlate the event with await spikes in disk metrics, confirming that production I/O is already affected by retry loops on pending sectors.
  • Fleet-wide visibility: If multiple drives of the same model show self-test failures around the same power-on hour count, that pattern points to a batch defect. Per-drive monitoring alone misses this.