The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / smartctl-disk-monitoring / smartctl-ssd-wear-leveling-count ▌

Operations Guides

SATA SSD wear-out: Wear_Leveling_Count and Media_Wearout_Indicator declining

SATA SSDs report remaining NAND endurance through vendor-specific SMART attributes, not the standardized NVMe Percentage Used field. Samsung exposes Wear_Leveling_Count at attribute ID 177. Intel and Solidigm expose Media_Wearout_Indicator at ID 233. Some vendors use ID 173 (also labeled Wear_Leveling_Count) or ID 231 (SSD_Life_Left). All express the same concept: firmware estimating how much rated program/erase cycle budget remains.

The problem for operators: these attributes are not standardized across vendors. The same attribute ID can carry different semantics on different drives. The THRESH column is almost always zero, so smartctl will never flag these attributes as failing regardless of how low the normalized value drops. The raw value encoding is vendor-defined and frequently misleading. A fleet with mixed SSD vendors cannot be monitored with a single threshold rule.

What the normalized value means

The normalized VALUE column is normally the useful indicator. For these wear attributes it commonly starts at 100 for a new drive and counts down as program/erase cycles accumulate; always verify the vendor scale. The THRESH column is typically 0, which means smartctl’s WHEN_FAILED column will never show FAILING_NOW or In_the_past for these attributes. A drive at 2% remaining life can still report SMART overall health as PASSED. Vendors set the threshold to zero so the wear indicator never triggers the PASSED/FAILED assessment.

The wear indicator is a capacity-planning signal, not a real-time failure indicator. The drive will continue to operate past its endurance limit, but manufacturer reliability guarantees no longer apply. The transition from “endurance consumed” to “drive dead” can be abrupt, especially once the spare block pool starts running low.

For Samsung and generic attributes, the normalized value counts from 100 toward 0. For Intel, it counts from 100 toward 1 and floors at 1, meaning the indicator stops reporting additional wear even though the drive may still be accumulating it.

The rate of decline is driven by write workload and write amplification. Two identical drives with the same host write volume can show different normalized values if their workloads produce different write amplification factors. Random small writes produce higher amplification than sequential writes. A drive in a database WAL role will consume endurance faster than the same drive in a read-heavy role, even if the host write volume looks similar.

ColumnWhat it meansWhat to do with it
VALUENormalized remaining life (100 = new)This is the wear indicator. Track its decline.
THRESHVendor threshold for pre-failUsually 0. If non-zero, treat crossing it as urgent.
WHEN_FAILEDWhether the attribute has crossed THRESHWill almost always show “-” because THRESH is 0.
RAW_VALUEVendor-specific raw dataIgnore for wear percentage. See below.
flowchart TD
    A["SATA SSD wear attribute"] --> B["Read normalized VALUE column"]
    B --> C["Ignore RAW_VALUE for wear percentage"]
    C --> D{"Identify vendor"}
    D --> E["Samsung: ID 177, counts 100 to 0"]
    D --> F["Intel: ID 233, counts 100 to 1"]
    D --> G["Generic: ID 173, counts 100 to 0"]
    E --> H["Track decline rate per week or month"]
    F --> H
    G --> H
    H --> I["Cross-ref Total_LBAs_Written vs rated TBW"]
    I --> J["Project replacement date"]

Vendor-specific attribute mapping

VendorAttribute IDNameNew valueEnd of lifeNotes
Samsung177Wear_Leveling_Count1000Raw value = average P/E cycles per block
Intel / Solidigm233Media_Wearout_Indicator1001 (floor)Raw value records NAND erase-cycle count; its exact encoding is vendor/firmware-specific
Generic (some)173Wear_Leveling_Count1000Used by Crucial and some Samsung models
Some vendors231SSD_Life_Left1000Less common

Samsung’s raw value for ID 177 reports the average number of program/erase cycles per block. This is useful as a diagnostic cross-check but is not a wear percentage. Intel’s raw value for ID 233 can appear alarmingly large (tens of thousands) while the normalized value remains at 100. The raw value is not directly interpretable as a wear percentage on either vendor.

One caveat: smartmontools uses a heuristic vendor database to assign attribute names to IDs. On non-Intel drives, it can apply Intel-specific labels to the wrong attribute. If you see Media_Wearout_Indicator labeled on a Samsung drive, verify the attribute ID and drive model before trusting the label. Always confirm the vendor via smartctl -i.

Common misinterpretations

Panicking at the raw value. The most common false alarm. A Media_Wearout_Indicator raw value of 95966 looks catastrophic until you realize the normalized VALUE is 100 and the raw value counts cumulative erase cycles. Samsung’s raw value for Wear_Leveling_Count can be in the thousands on a healthy drive. Always read the VALUE column.

Expecting smartctl to flag the wear attribute as failing. Because THRESH is almost always 0, the WHEN_FAILED column will always show “-”. A drive at 3% remaining life will still report SMART health as PASSED. Do not rely on WHEN_FAILED or the overall PASSED/FAILED assessment for wear monitoring. Track the normalized value trend directly.

Anomalous values and tool encoding. smartctl reads the ATA normalized VALUE as an unsigned 0-255 byte. A negative result such as -92 for byte 192 indicates signed-byte misinterpretation by another tool, not standard smartctl output. If a vendor or firmware uses an unusual scale, validate the reading with smartctl -A and the vendor tool rather than forcing it into a 0-100 rule.

Intel flooring at 1. When Intel’s Media_Wearout_Indicator reaches 1, it stops decreasing. The drive may continue to accumulate significant wear, but the indicator will not reflect it. A drive sitting at ID 233 VALUE = 1 for months is still degrading. Switch to tracking Total_LBAs_Written and Reallocated_Sector_Ct for ongoing monitoring once the indicator floors.

Consumer SSDs not exposing the attribute. Many consumer SSDs do not expose a wear indicator at all. If smartctl -A does not show any of IDs 173, 177, 231, or 233, the drive may simply not report wear. In that case, Total_LBAs_Written against rated TBW is your only runway estimation tool.

Rare non-zero THRESH. In rare cases, a Samsung drive will have a non-zero THRESH (for example, VALUE = 003, THRESH = 005, WHEN_FAILED = FAILING_NOW). When this happens, treat it as urgent: the drive firmware itself considers it failing. This is uncommon but does occur on some models.

Cross-referencing against write volume and rated TBW

The wear indicator is the vendor’s internal estimate. You can build an independent estimate from host write volume and the drive’s rated TBW from the datasheet.

# Check Total_LBAs_Written (ID 241) and identify the drive
smartctl -A /dev/sdX | grep -iE "Total_LBAs_Written"
smartctl -i /dev/sdX | grep -iE "Model|Firmware"

The calculation:

  1. Read the decoded ID 241 name and use the correct unit. Total_LBAs_Written is in 512-byte sectors, but drivedb.h also maps ID 241 on some drives to Host_Writes_32MiB or Lifetime_Writes_GiB.
  2. Convert the decoded unit to bytes (sectors by 512, 32MiB units by 33,554,432 bytes, GiB units by 1,073,741,824 bytes).
  3. Divide by the rated TBW from the drive datasheet.
  4. Multiply by 100 to get percentage endurance consumed.

This gives you host-write-based endurance consumption. The wear indicator (normalized VALUE) includes the effect of write amplification internally, so it will typically show more wear than the host-write math predicts. If the discrepancy is large, write amplification is high. Common causes: random small writes, misaligned partitions, full-drive conditions that force inefficient garbage collection, or workloads that defeat controller compression.

Runway estimation:

days_remaining = (rated_TBW - current_TBW) / daily_write_rate_TB

Apply a 20-30% safety margin because write amplification varies with workload changes and the drive datasheet TBW is a warranty figure, not a cliff edge.

Cross-check the two estimates. If the wear indicator says 20% remaining but the TBW math says 50% remaining, the drive is experiencing high write amplification. Investigate workload alignment, TRIM status, and drive fullness.

The wear-out cliff

SSD wear-out is a distinct failure pattern: the drive degrades gradually but can fail suddenly. Once the spare block pool is exhausted or the controller’s internal error correction can no longer compensate, the drive may go read-only or die completely. The transition from “slightly degraded” to “dead” can happen within hours.

This is why the wear indicator matters. It gives you lead time to replace the drive before the cliff. Signals that the cliff is approaching:

  • Wear indicator normalized value in single digits (Samsung ID 177 below ~10, Intel ID 233 at 1)
  • Reallocated_Sector_Ct (ID 5) starting to increase alongside the declining wear indicator
  • Performance degradation from increased garbage collection overhead
  • The drive approaching or exceeding its rated TBW

When the wear indicator is declining alongside rising reallocated sectors, the drive is in active wear-out. The spare block pool is being consumed as worn blocks fail. Schedule replacement immediately.

# Check for active wear-out: declining wear indicator plus rising reallocations
smartctl -A /dev/sdX | grep -iE "Wear_Leveling|Wearout|Reallocated"
# Check error log for media errors correlating with wear
smartctl -l error /dev/sdX

Signals to watch in production

SignalWhy it mattersWarning sign
Wear indicator normalized VALUE (ID 177/233/173)Remaining NAND endurance estimateDeclining toward single digits
Total_LBAs_Written (ID 241)Host write volume for runway calculationRate of increase vs rated TBW
Reallocated_Sector_Ct (ID 5)Spare block consumptionAny increase, especially alongside declining wear indicator
Power_On_Hours (ID 9)Context for wear rate normalizationDrives past 3-5 years have higher failure probability
SMART overall healthWill remain PASSED until very lateDo not rely on this for wear monitoring
Drive temperature (ID 194)High temperature accelerates NAND wearSustained above 65 C compounds wear rate

Monitoring with Netdata

Netdata collects SMART attributes on each disk and trends them over time. The useful signal for wear-out is the rate of decline, not a point-in-time threshold.

  • Wear indicator trending. The normalized value declines slowly over months. Trending it lets you see acceleration and project replacement dates rather than discovering the wear only when you happen to check.
  • Correlation with write volume. Overlaying Total_LBAs_Written against the wear indicator reveals write amplification. If the wear indicator drops faster than the TBW math predicts, the workload is burning endurance inefficiently.
  • Reallocated_Sector_Ct correlation. Rising reallocated sectors alongside a declining wear indicator is the active wear-out signal. Alerting on both signals together reduces false positives and catches real failures earlier.
  • Per-vendor attribute selection. Mixed fleets need correct attribute ID mapping per drive model to avoid the smartmontools mislabeling problem.