The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / uwsgi / uwsgi-response-time-high ▌

Operations Guides

uWSGI response time climbing: rising avg_rt and where it comes from

When avg_rt climbs in the uWSGI stats server, the instinct is to look for slow application code. That is often right, but avg_rt is more nuanced than a simple average response time. Understanding what it actually measures is the difference between a fast diagnosis and a misleading rabbit hole.

avg_rt is an exponential moving average (EMA), not a cumulative average. When it climbs, something per-request is getting slower. The question is whether the cause is a downstream dependency (database pool exhaustion, slow external API), resource contention (CPU saturation, GC storms, GIL pressure in threaded Python), or cascading starvation (workers backing up because each request holds the worker longer). Correlating avg_rt with the worker busy ratio narrows this quickly.

What avg_rt actually is

The avg_rt field is exposed per worker in the uWSGI stats server JSON as workers[].avg_rt, an integer in microseconds. It is an EMA of per-request processing time for that specific worker, not a cluster-wide or cumulative average.

uWSGI updates it after each request as avg_rt = (old_avg_rt + current_request_time) / 2, giving roughly 50% weight to the most recent request, 25% to the one before, 12.5% to the third, and so on. After about seven requests, contributions from older values fall below 1%.

Consequences:

  • Short memory: The metric tracks a short recent window, not a lifetime average.
  • High volatility: The last request contributes 50% of the value. A single outlier can double avg_rt. A request that takes 2000ms on a worker whose previous EMA was 50ms pushes avg_rt past 1000ms in one update.
  • No percentile information: avg_rt cannot tell you whether 99% of requests are fast and 1% are slow, or whether all requests are moderately slow. For real latency SLIs, parse per-request timing from access logs using format variables like %(msecs) (milliseconds) or %(micros) (microseconds) in your --log-format configuration.
  • Per-worker, not aggregate: Each worker has its own avg_rt. A single slow worker can raise the average across all workers even when most are healthy.

Whether avg_rt resets when a worker respawns is not confirmed by the uWSGI source code. Only delta_requests is confirmed to reset on respawn. Do not assume a respawn clears avg_rt to zero.

avg_rt can also report non-null values on workers that are idle, particularly after traffic subsides. The value you see may be stale rather than current. If your polling interval is coarse, you may be reading a value from minutes ago rather than a real-time measurement.

Common causes

CauseWhat it looks likeFirst thing to check
Downstream dependency slowdownavg_rt rising, busy ratio stable, throughput steady or slightly downDatabase query latency, external API response times, connection pool wait times
Cascading starvationavg_rt rising, busy ratio rising toward 100%, throughput droppingListen queue depth via ss, harakiri count, worker count vs traffic
GC storms (Python)avg_rt spiking periodically, RSS high or growing, CPU correlated with spikesPython GC stats, RSS growth pattern, RSS vs avg_rt correlation
GIL contention (threaded mode)avg_rt high with low per-core CPU utilization, throughput lower than expected for worker countThread count per worker, CPU-bound vs I/O-bound ratio in application code
Cold cache after restartavg_rt high immediately after deploy, self-resolving as caches warmDeployment timestamps correlated with avg_rt baseline
Memory pressure or swappingavg_rt rising gradually then sharply, RSS near system limits, swap nonzeroWorker RSS trends, vmstat swap in/out, OOM killer in dmesg
Lock contention in applicationavg_rt high but CPU and I/O low, one or few workers disproportionately affectedApplication-level lock instrumentation, per-worker avg_rt divergence

Quick checks

These are read-only diagnostic commands. Adjust the stats socket address (127.0.0.1:9191) to match your deployment. If your uwsgi binary is inside a virtualenv or container, use its full path.

# Check avg_rt per worker (microseconds converted to ms), filtering out cheaped workers
uwsgi --connect-and-read 127.0.0.1:9191 | jq '.workers[] | select(.pid > 0 and .status != "cheap") | {id: .id, avg_rt_ms: (.avg_rt / 1000), status: .status}'

# Compute average avg_rt across all alive workers (ms)
uwsgi --connect-and-read 127.0.0.1:9191 | jq '[.workers[] | select(.pid > 0 and .status != "cheap")] | if length > 0 then (map(.avg_rt) | add / length / 1000) else 0 end'

# Check worker busy ratio alongside avg_rt
uwsgi --connect-and-read 127.0.0.1:9191 | jq '([.workers[] | select(.status == "busy")] | length) as $busy | ([.workers[] | select(.pid > 0 and .status != "cheap")] | length) as $alive | ([.workers[] | select(.pid > 0 and .status != "cheap")] | map(.avg_rt) | if length > 0 then add / length / 1000 else 0 end) as $avg | {busy_workers: $busy, alive_workers: $alive, busy_pct: (if $alive > 0 then ($busy / $alive * 100 | floor) else 0 end), avg_rt_ms: $avg}'

# Check harakiri count (should be zero or near-zero in healthy deployments)
uwsgi --connect-and-read 127.0.0.1:9191 | jq '[.workers[].harakiri_count] | add'

# Check what URI busy workers are processing
uwsgi --connect-and-read 127.0.0.1:9191 | jq '.workers[] | select(.status == "busy") | {id: .id, uri: .uri, avg_rt_ms: (.avg_rt / 1000)}'

# Compare EMA avg_rt against cumulative average per worker
# running_time is a cumulative microseconds counter (same unit as avg_rt); /1000 converts to ms.
uwsgi --connect-and-read 127.0.0.1:9191 | jq '.workers[] | select(.pid > 0 and .requests > 0) | {id: .id, true_avg_ms: (.running_time / .requests / 1000), ema_avg_rt_ms: (.avg_rt / 1000), requests: .requests}'

# Check listen queue externally (uWSGI's listen_queue field is unreliable on Linux)
ss -ltn 'sport = :8000' | awk 'NR>1 {print "recv_q:", $2, "send_q(backlog):", $3}'

For the last command, replace :8000 with your uWSGI listen port. The ss Recv-Q column shows the current kernel backlog depth, and Send-Q shows the configured backlog limit.

How to diagnose it

The diagnostic flow hinges on one key correlation: is the busy ratio climbing alongside avg_rt?

flowchart TD
    A["avg_rt rising"] --> B{"Busy ratio rising?"}
    B -- "Yes, toward 100%" --> C["Cascading starvation"]
    B -- "No, stable" --> D["Per-request slowdown"]
    C --> E["Check: ss backlog, harakiri count"]
    D --> F["Check: downstream deps, GC, per-worker avg_rt"]
    A --> G{"Near harakiri timeout?"}
    G -- "Yes" --> H["URGENT: kills imminent"]
    G -- "No" --> I["Monitor and investigate"]
  1. Confirm the trend is real. A single slow request can spike avg_rt by 50% in one update. Check whether the elevation persists across at least 3 to 4 polling intervals before treating it as a real trend rather than EMA noise.

  2. Pull the busy ratio. This is the critical discriminator.

    • Rising avg_rt + stable busy ratio: each request is taking longer, but workers are not backing up. Points to a downstream dependency slowdown or in-application per-request cost increase. Check database query latency, external API response times, and connection pool wait times.
    • Rising avg_rt + rising busy ratio: workers are taking longer per request and accumulating. This is cascading starvation. The listen queue is filling. Check ss for backlog depth, harakiri count for kills, and whether a specific URI is consuming all workers.
  3. Check for harakiri proximity. If avg_rt is approaching your configured harakiri timeout, workers are about to be killed. Each harakiri kill drops the in-flight request (client gets 502), respawns the worker, and the cycle repeats if the root cause persists. With gevent or async workers, harakiri is per-process, not per-coroutine. Every new request resets the counter, making harakiri less effective and the avg_rt-to-harakiri correlation less reliable.

  4. Check per-worker divergence. If one worker has a dramatically higher avg_rt than the others, that worker hit a pathological code path: a regex catastrophe, an unbounded query, a blocking I/O call without timeout, or memory pressure specific to its process. Check that worker’s URI in the stats output and its /proc/<pid>/syscall or /proc/<pid>/wchan for the blocked state.

  5. Compare avg_rt to true average. Compute running_time / requests per worker and compare it to avg_rt. If they diverge significantly, the EMA is either over-weighting recent outliers (avg_rt much higher than true average) or under-weighting them (avg_rt much lower). This tells you whether the problem is recent-onset or long-standing.

  6. Check downstream dependencies. Rising avg_rt with no change in traffic, worker count, or application code almost always points downstream. Correlate avg_rt with database connection count, query latency, Redis response times, and external API health. The root cause is usually visible in the downstream system’s metrics, not in uWSGI’s.

Metrics and signals to monitor

SignalWhy it mattersWarning sign
avg_rt (per worker)Tracks recent per-request latency trend; approaching harakiri is urgentSustained increase above 2x baseline, or approaching harakiri timeout
Worker busy ratioDiscriminates downstream slowdown from cascading starvationRising in lockstep with avg_rt indicates starvation
Harakiri count (delta)Requests exceeding timeout, workers being killedAny sustained non-zero rate in a normally-zero deployment
Running time / requestsTrue cumulative average per worker, free from EMA volatilityDivergence from avg_rt indicates recent vs long-standing problem
Stuck request ageElapsed time of in-flight requests via per-core timestampsRequest age approaching harakiri or exceeding 60s without harakiri
Worker RSSMemory pressure causing GC overhead or swappingSteady growth, or RSS near system limits
Exception rateApplication errors correlated with latency spikesSustained increase from baseline
Write errorsClients disconnecting before response deliveryCorrelated with avg_rt spikes
Listen queue depth (via ss)Workers not keeping up with incoming connectionsNon-zero Recv-Q sustained

Fixes

Downstream dependency slowdown

The most common cause. The application code has not changed, but each request waits longer on a database, cache, or external API.

  • Check downstream connection pool utilization. If pools are at maximum, increase pool size or reduce worker count to lower total connection demand.
  • Add or tighten timeouts on downstream calls. A database query or HTTP call without a timeout can hang indefinitely, and avg_rt will reflect the wait.
  • Look for lock contention in the database (long-running transactions, advisory locks blocking queries).

Cascading starvation

Workers take longer per request, fewer workers are available, the listen queue fills, and connections start dropping.

  • If a specific URI is consuming all workers (visible in the stats uri field), consider rate-limiting or circuit-breaking that endpoint at the load balancer to free workers for other traffic.
  • Increase worker count if the system has CPU and memory headroom.
  • Reduce per-request latency by addressing the downstream cause.

GC storms (Python)

Large heaps trigger longer GC pauses, which inflate per-request time.

  • Monitor RSS growth and set --reload-on-rss to recycle workers before memory pressure becomes severe.
  • Consider tuning Python GC thresholds if the application has known large-object allocation patterns.

GIL contention (threaded mode)

In Python threaded mode, CPU-bound work is serialized by the GIL despite multiple threads per worker. avg_rt rises because threads wait for the GIL, not because the application is doing more I/O.

  • Move CPU-bound work to separate processes (more workers, fewer threads).
  • Use --processes N --threads 1 for CPU-bound workloads instead of --threads M.

Single-worker poisoning

One worker has a dramatically higher avg_rt than others.

  • Identify the worker’s PID from the stats output and check /proc/<pid>/syscall and /proc/<pid>/wchan for the blocked state.
  • If harakiri is configured, wait for it to fire. If harakiri is not configured, the worker is stuck permanently. A manual kill -9 <pid> will force a respawn, but this drops the in-flight request. Use it as a last resort.
  • Identify the URI that triggered the issue and add application-level protections (timeouts, result limits, input validation).

Prevention

  • Do not use avg_rt as your latency SLI. Its EMA nature makes it volatile and it cannot express percentiles. Use access log percentiles (p50, p95, p99) per endpoint for SLI tracking.
  • Always configure harakiri. Without it, stuck workers have no timeout and permanently consume a worker slot. Set it to 2-3x your expected maximum legitimate request duration. avg_rt approaching harakiri is an actionable early warning.
  • Alert on deviation from baseline, not absolute thresholds. A REST API baselining at 50ms and an ML inference endpoint baselining at 2000ms need different thresholds. Alert when avg_rt exceeds 2x its recent baseline sustained over 5 minutes.
  • Correlate avg_rt with busy ratio in dashboards. The combination is far more diagnostic than either signal alone.
  • Monitor downstream dependencies alongside uWSGI metrics. When avg_rt rises, the root cause is usually visible in the downstream system first.
  • Track per-worker avg_rt, not just the aggregate. A single outlier worker can be invisible in an aggregate average.

Monitoring with Netdata

  • Netdata’s uWSGI collector polls the stats server at 1-second resolution, exposing per-worker avg_rt and busy ratio side by side. This granularity distinguishes a single-request spike from a sustained trend and supports the busy-ratio correlation that separates downstream slowdown from cascading starvation.
  • harakiri_count is tracked as a rate (delta over time), surfacing when requests start being killed.
  • Anomaly detection adapts to the EMA’s volatility without requiring per-endpoint threshold tuning.
  • Database, Redis, and system metrics collected on the same host let you correlate avg_rt spikes with downstream latency or resource pressure without switching tools.