The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / tomcat / tomcat-request-throughput-drop ▌

Operations Guides

Tomcat request throughput dropping: requestCount rate below baseline

The Tomcat requestCount counter on GlobalRequestProcessor is climbing slower than expected. The drop tells you fewer requests are being processed, not why. The cause can be upstream of Tomcat (load balancer routed traffic away, health check started failing, CDN absorbing load) or inside Tomcat (worker thread pool exhausted, JVM in a GC death spiral, deadlock consuming the pool).

The first diagnostic fork: is traffic still arriving at this host? If the answer is no, you have a routing, load balancer, or health check problem, and chasing thread dumps wastes time. If yes, Tomcat is failing to keep up, and the question becomes whether the failure is I/O bound (threads blocked on a slow backend) or CPU bound (GC thrashing or a compute-bound code path).

This article assumes you collect requestCount as a per-second or per-minute rate, not a raw cumulative value. A cumulative counter plotted as-is is useless for alerting and triggers false positives after every restart. The rate computation must be reset-aware: the counter drops to zero on JVM restart, so a naive delta produces a huge negative spike that a flat alert threshold interprets as a recovery.

What this means

requestCount is a cumulative long counter exposed by the Catalina:type=GlobalRequestProcessor,name="<connector>" MBean. It increments once per request the connector processes, including health checks and static asset requests. It resets to zero when the JVM restarts. To monitor throughput, compute a delta over a fixed window and divide by the window length to get a rate.

A rate below baseline has two interpretations:

  1. Fewer requests are arriving. The drop is real demand reduction. The cause is upstream of Tomcat: the load balancer removed the instance from rotation, a routing change redirected traffic, a CDN is absorbing load, or scheduled maintenance shifted the diurnal pattern.
  2. Requests are arriving but Tomcat is processing fewer of them. Tomcat has a processing constraint. The four classic causes are worker thread pool exhaustion, GC death spiral, a backend dependency failing or hanging, or an application-level deadlock.

The single most important diagnostic question is which of these two you are in. Correlating the requestCount rate with currentThreadsBusy and JVM CPU answers it in seconds. If upstream traffic metrics show requests still arriving but currentThreadsBusy is parked at maxThreads, you are in case two, and the bottleneck is almost always a backend.

flowchart TD
    A["requestCount rate below baseline"] --> B{"Upstream traffic still arriving at host?"}
    B -- "No" --> C["LB / DNS / health check routing"]
    B -- "Yes" --> D{"currentThreadsBusy at maxThreads?"}
    D -- "No" --> E{"GC pause time elevated?"}
    E -- "Yes" --> F["GC death spiral"]
    E -- "No" --> G["Check error rate, app context state"]
    D -- "Yes" --> H{"JVM CPU high?"}
    H -- "Yes" --> I["CPU-bound or GC thrashing"]
    H -- "No" --> J["I/O blocked - backend or deadlock"]
    J --> K["Thread dump identifies the blocker"]

Common causes

CauseWhat it looks likeFirst thing to check
Slow backend / backend failurecurrentThreadsBusy at maxThreads, JVM CPU low, threads WAITING on socket readjstack for the dominant blocked stack trace
GC death spiralJVM CPU high, heap sawtooth flattened to a line at max, Full GC count climbingjstat -gcutil or GC log
Application deadlockThread pool sticks at 100%, multiple threads BLOCKED on the same lockjstack, search for “Found one Java-level deadlock”
Load balancer removed instancerequestCount rate falls and upstream metrics also fall, accept queue emptyLB health check status, Tomcat health endpoint
App failing fast on one routeerrorCount rises alongside the drop, errors concentrated on one pathAccess log status code breakdown

Quick checks

Run these read-only. None change Tomcat state.

# Snapshot request count, thread pool, errors, and processing time from Manager XML
curl -s -u "$USER:$PASS" 'http://localhost:8080/manager/status?XML=true' | \
  grep -oP '(requestCount|currentThreadsBusy|maxThreads|currentThreadCount|errorCount|processingTime)="[0-9]+"'

# Sample twice, 10 seconds apart, to compute a live rate:
# (requestCount_now - requestCount_10s_ago) / 10 = requests per second

# Thread pool ratio via JMX
# jmxterm has no -e execute flag (-e is exit-on-failure); pipe the command on stdin.
echo "get -b Catalina:type=ThreadPool,name=\"http-nio-8080\" currentThreadsBusy maxThreads" | \
  java -jar jmxterm.jar -l localhost:9090 -n -v silent

# CPU snapshot: low CPU with threads at max = I/O blocked; high CPU = GC or compute bound
ps -p "$(pgrep -f 'catalina.startup.Bootstrap')" -o %cpu,%mem,etime

# GC activity at 1-second cadence
# Note: jstat remains a supported JDK tool; -gcutil works on JDK 8 through current releases.
jstat -gcutil "$(pgrep -f 'catalina.startup.Bootstrap')" 1000

# Accept queue depth on the HTTP port. Non-zero Recv-Q means connections are backing up
ss -tnl 'sport = :8080'

# 5xx rate from the access log over the current day
awk '$9 ~ /^5/' /var/log/tomcat/localhost_access_log.$(date +%Y-%m-%d).txt | wc -l

If currentThreadsBusy == maxThreads and JVM CPU is low, take a thread dump immediately. It identifies which backend the threads are stuck on.

# Capture a thread dump (safe and read-only, but large)
jstack "$(pgrep -f 'catalina.startup.Bootstrap')" > /tmp/tomcat-threads-$(date +%s).txt
# Find the dominant stack frame across worker threads
grep -A 3 "http-nio-8080-exec" /tmp/tomcat-threads-*.txt | grep "at " | sort | uniq -c | sort -rn | head

How to diagnose it

  1. Confirm the drop is real, not a counter reset. Compare JVM uptime against the time the rate dropped. If the JVM restarted, requestCount jumped to zero and a hand-rolled delta will misfire. A Prometheus-style rate() handles resets correctly; a shell delta does not.
  2. Verify traffic is still arriving upstream. Compare against the load balancer request rate, upstream proxy logs, or a client-side metric. If upstream traffic is also down, this is a routing or demand problem, not a Tomcat problem. Stop here.
  3. Check currentThreadsBusy / maxThreads. If the ratio is near 1.0 and sustained, the worker pool is the bottleneck. The throughput drop is a consequence of threads not being freed, not of fewer requests arriving.
  4. Look at JVM CPU. Low CPU with a saturated thread pool points to I/O blocking (database, downstream HTTP, DNS, file). High CPU points to GC thrashing or a compute-bound code path.
  5. Check GC activity. Run jstat -gcutil <pid> 1000 for a few seconds. If Full GC count (FGC) is climbing and Full GC time (FGCT) dominates wall clock, you are in a GC death spiral. Throughput oscillates between zero during pauses and brief bursts between cycles, which produces a misleading average.
  6. Take a thread dump. When threads are saturated, the thread dump is the diagnostic. Look for the dominant stack trace pattern across http-nio-8080-exec threads. If many share the same blocked frame, that frame is the backend or lock consuming your pool.
  7. Check errorCount rate. A rising error rate alongside the throughput drop points to backend failures. errorCount increments on any status >= 400, so it mixes 4xx and 5xx; use the access log if you need to separate them.
  8. Check the accept queue. ss -tnl 'sport = :8080'. A non-zero Recv-Q means connections are backing up in the OS backlog because Tomcat cannot accept them fast enough. This signal is invisible to JMX.

Metrics and signals to monitor

SignalWhy it mattersWarning sign
requestCount rateThe throughput signal itselfBelow 50% of same-daypart baseline
currentThreadsBusy / maxThreadsWorker pool capacitySustained at 1.0 means active queuing
Request processing time (avg or p95)Latency pressureRising while throughput falls = slowdown, not traffic drop
GC pause time and Full GC countGC-induced stallsAny Full GC with G1 warrants investigation
errorCount rateBackend or app failuresRising sharply
JVM CPUDistinguishes I/O wait from GC/computeLow with saturated pool = I/O; high = GC
Accept queue depth (ss Recv-Q)Connection backlog, invisible to JMXSustained non-zero
processingTime delta / requestCount deltaMean processing time per requestRising trend

Fixes

Slow backend or backend failure

The dominant production cause. Threads block on a database query, a downstream HTTP call, or DNS with no timeout configured. The fix is upstream of Tomcat: restore the backend, configure socket and query timeouts on every outbound path, or shed load.

  • Do not restart Tomcat first. If the backend is still degraded, threads re-accumulate immediately after restart and you are back in the same state within minutes.
  • Do take a thread dump before restarting. The stack trace identifies the offending backend. Once the backend is healthy, throughput recovers on its own.

Tradeoff: lowering outbound connectionTimeout fails requests faster but increases the error rate. A circuit breaker is usually a better tool than shorter timeouts for genuinely degraded backends.

GC death spiral

If GC is the cause, the JVM is already compromised. Capture a heap dump before restarting or the evidence is gone.

# Heap dump of all reachable and unreachable objects. Does not trigger a Full GC
# unless you append :live (which forces one). Large heaps make this slow and can
# pause the JVM. Run before restart.
jmap -dump:format=b,file=/tmp/heap-$(date +%s).hprof "$(pgrep -f 'catalina.startup.Bootstrap')"

Restart clears memory and restores throughput, but the leak recurs. Analyze the heap dump offline (Eclipse MAT) to find the dominant retainer. See Tomcat GC death spiral and Tomcat heap dump before restart.

Application deadlock

jstack prints “Found one Java-level deadlock” when one exists. A deadlock is the one case where restart is the only immediate fix. The longer-term fix is in application code (lock ordering, lock acquisition across paths). For related redeploy-driven failure modes, see Tomcat classloader leak on redeploy.

Load balancer or routing

If traffic stopped arriving at the host, fix the routing layer. Check the LB health check configuration against your health endpoint. A health check that exercises heavyweight dependencies (database, downstream calls) can fail under load and cause the LB to drain the instance, which from inside Tomcat looks exactly like a throughput problem.

Prevention

  • Use time-of-day baselines, not flat rolling averages. Diurnal traffic makes flat averages produce false positives at off-peak hours and miss real drops during peak. Compare against the same hour and same day of week.
  • Alert on currentThreadsBusy / maxThreads sustained above 0.8, not just on throughput. Thread pool saturation is the leading indicator; the throughput drop is the lagging symptom.
  • Configure timeouts on every outbound connection. Default socket timeouts in java.net.HttpURLConnection, Apache HttpClient, and most JDBC drivers are effectively infinite. A hung backend will consume threads forever.
  • Enable StuckThreadDetectionValve with a threshold appropriate to your latency profile. The default 600 seconds is too long for most user-facing services; 60 seconds is usually better. Its output is a log message, not a JMX metric, so wire log monitoring to it.
  • Filter health checks out of throughput baselines if your LB probes the connector frequently. requestCount includes them, and a change in probe interval can look like a traffic change.
  • Monitor the accept queue (ss Recv-Q). It is the only signal that catches connection refusal before clients report errors.

How Netdata helps

  • The Tomcat collector exposes requestCount, currentThreadsBusy, maxThreads, processingTime, and errorCount at per-second resolution, so the throughput rate is computed from real deltas rather than sparse scrapes.
  • Per-second collection makes counter resets on restart visible as a clean step, and the rate calculation handles them correctly without manual delta logic.
  • ML-based anomaly detection on the requestCount rate adapts to diurnal patterns, which avoids the false positives that flat thresholds produce on real workloads.
  • Correlating a throughput drop with thread pool saturation, GC pause time, and JVM CPU in a single view shortens the “is this an I/O problem or a GC problem” question to a few seconds.
  • The same chart surface shows errorCount rising alongside throughput, which points to backend failure rather than a routing change.
  • OS-level accept queue depth from the ss collector can be correlated with connector-level metrics, closing the gap between JMX-visible state and kernel-level connection refusal.