Correlation on Netdata

Expanded Chart View: Investigate Without Leaving the Chart

Wed, 08 Apr 2026 00:00:00 +0000

Charts in Netdata have always been interactive. You can zoom, pan, select time ranges, and see per-second granularity across thousands of metrics. But when you spotted something interesting, the next steps usually meant leaving the chart: opening another tab to check a related metric, navigating to the correlation tool, or pulling up a different time range for comparison. The investigation workflow lived outside the chart, even though the chart was where the investigation started.

Anomaly Advisor: Root Cause In Seconds, Not Hours

Thu, 18 Dec 2025 00:00:00 +0000

Netdata Anomaly Advisor uses edge-native machine learning with 18-model consensus to eliminate 99% of false positives while surfacing root causes in the top 30-50 metrics from thousands collected. Get sub-2-second correlation analysis at any scale without configuration, training delays, or specialist expertise.

Blast Radius Detection For Faster Incident Response

Thu, 18 Dec 2025 00:00:00 +0000

Netdata reveals blast radius dynamically through real-time anomaly correlation and ML-powered pattern recognition, showing the complete story from first failure to full impact in seconds.

Netdata Now Troubleshoots Your Alerts for You

Sun, 03 Aug 2025 00:00:00 +0000

The 2 AM pager alert. For anyone in Ops, SRE, or IT administration, those words trigger a familiar sense of dread. An alert has fired. Is it a real fire, or another false alarm waking you from a dead sleep? The pressure is on. Every minute of downtime costs money and reputation, but troubleshooting a complex system when you’re sleep-deprived is a Herculean task.

This cycle is a massive drain on engineering resources. The daily grind of sifting through alerts, trying to distinguish signal from noise, and manually correlating metrics to find a root cause consumes countless hours. This constant firefighting leads to alert fatigue, where even critical notifications start to get ignored. The core questions are always the same: Is this a real problem? What is the potential impact? Why did this trigger? What do I do next? Answering them is a slow, manual, and often stressful process.

What Is Event Correlation Benefits Use Cases And Techniques

Sun, 25 May 2025 00:00:00 +0000

In today’s complex and dynamic IT environments, organizations are inundated with a massive volume of events generated by countless sources – applications, servers, network devices, security systems, and more. This flood of data, while rich in potential insights, can easily become overwhelming. The core challenge lies in sifting through this “sea of data” to identify events that truly matter and understand their relationships. This is precisely where event correlation becomes indispensable. It’s the process of sensing and analyzing relationships between disparate events to uncover meaningful patterns, diagnose root causes, and enable proactive responses.

Transforming critical software development

Thu, 01 Feb 2024 00:00:00 +0000

Revolutionizing Vehicle Automation

ADASTEC, a frontrunner in automated driving software for commercial vehicles, utilizes Netdata to ensure the highest standards of reliability and efficiency in their operations. Specializing in SAE Level-4 automation, ADASTEC empowers OEMs to craft modern, automated, and connected vehicles. The challenge of distinguishing crucial alerts within their software stack posed a significant hurdle, as Tayfun Yurdaer, a DevOps specialist at ADASTEC, explains. The essential task was identifying alerts pivotal for the mission-critical applications to respond appropriately, amidst the complexity of their software environment.

The Future of Monitoring is Automated and Opinionated

Tue, 09 May 2023 00:00:00 +0000

So, you think you monitor your infra?

As humanity increasingly relies on technology, the need for reliable and efficient infrastructure monitoring solutions has never been greater.

However, most businesses don’t take this seriously. They make poor choices that soon trap their best talent, the people who should be propelling them ahead of their competition.

Consider this: most of the world believes that each company needs to dedicate time, talent, and money to configure and set up the monitoring of their web servers and database servers from scratch!

Metric Correlations on the Agent

Wed, 15 Jun 2022 00:00:00 +0000

As of v1.35.0 the Netdata Agent can now run Metric Correlations (MC) itself. This means that, for nodes with MC enabled, the Metric Correlations feature just got a whole lot faster!

The Netdata Metric Correlations feature uses a Two Sample Kolmogorov-Smirnov test to look for which metrics have a significant distributional change around a highlighted window of interest. This can be useful when you are interested in short term “change detection” and want to try answer the question “what else changed around this time?”.

Root cause analysis using Metric Correlations

Fri, 03 Sep 2021 00:00:00 +0000

As complexity of systems and applications continue to evolve and change, the number of metrics that need to be monitored grows in parallel. Whether you’re on a DevOps team, an SRE, or a developer building the code yourself, many of these components may be fragmented across your infrastructure, making it increasingly difficult to identify the root cause when experiencing downtime or abnormal behavior. To help solve this challenge, we built the Metric Correlations feature – an automated analysis tool that evaluates all your metrics to identify which have changed the most within a given period of interest.

Real-Time Infrastructure Monitoring Now In Netdata Cloud

Thu, 22 Oct 2020 00:00:00 +0000

The Netdata Agent is well-equipped to solve monitoring and troubleshooting challenges for single nodes. We love that the Agent is so valuable to our users, but Netdata Cloud is designed for infrastructure monitoring. That’s why we’re working so hard to offer even more capabilities and help users monitor and troubleshoot infrastructures of all sizes, entirely for free!

With the new Cloud Overview, you get every real-time chart and metric you need to understand the status of your infrastructure, explore, and troubleshoot, in a single view. We designed the Overview on one existing and beloved feature and another entirely new one that we’re very excited to launch for the first time.

Metric Correlations: Detect Patterns & Anomalies

Wed, 16 Sep 2020 00:00:00 +0000

Today, we are excited to launch our first Netdata Cloud Insights feature, Metric Correlations, developed for discovering underlying issues more quickly and identifying the root cause more efficiently. Read on to learn more about our approach to developing this new feature, how it works, and the many benefits you’ll find incorporating this into your team’s troubleshooting workflow.

Some background

Let’s start with a bit of a disclaimer. It seems machine learning (ML) (or “Artificial Intelligence,” if you are looking for more LinkedIn likes) has gone mainstream in the last few years, and we are probably by now somewhere near the “Peak of Inflated Expectations” on the hype cycle. It is in this context that we want to be clear about what our goals are in this space and our approach to releasing data-driven features that draw on techniques from statistics and ML. In short, we want to be clear, open, realistic, and avoid buzzwords at all costs!

Over the next 12 months, we are hoping to begin building a layer of intelligence¹ throughout Netdata (both Cloud and Agent) to assist with “human in the loop” troubleshooting, mainly to help users more easily surface slowdowns, anomalies, or other issues and lower your cognitive load² as you troubleshoot using Netdata. Simply put, we’re working to streamline your mean time to resolution (MTTR).

Netdata at Conf42 Cloud Native 2024

Mon, 01 Jan 0001 00:00:00 +0000

Costa Tsaousis spoke at Conf42 Cloud Native 2024 (virtual, March 2024) with “Practical AI with Machine Learning for Observability in Netdata.” The talk was a technical walkthrough of how Netdata applies unsupervised machine learning to metrics – not as a feature checkbox, but as a way to surface problems that static thresholds miss.

The key insight Costa presented: individual anomalies on individual metrics are often noise. A CPU spike on one node, a latency bump on one service – these happen constantly and mean nothing on their own. But when anomalies converge across multiple metrics and services simultaneously, that convergence is a strong signal that something unusual is actually happening. As he put it: “The power of ML becomes evident when seemingly noisy anomalies converge across various services, serving as indicators of something exceedingly unusual.”

NTP drift on network devices: the silent killer of event correlation

Mon, 01 Jan 0001 00:00:00 +0000

Clock drift on network devices produces no visible symptom. The device stays up, interfaces carry traffic, BGP sessions remain Established, SNMP keeps responding. The damage surfaces hours or days later, in a postmortem where two devices’ timestamps disagree by hundreds of milliseconds and the analyst cannot reconstruct the event sequence. Every cross-device correlation in the monitoring stack depends on accurate, monotonic time across every collector and every polled device.

The telemetry itself looks fine. Syslog messages arrive with timestamps. Flow records carry timestamps. BGP NOTIFICATION traps are time-stamped. The problem is that those timestamps are wrong relative to each other, and nothing flags the discrepancy. A device 200 milliseconds off its peers produces records that technically arrive but correlate poorly with records from correctly synchronized devices.

Webinar: Netdata AI Now Talks to Your Other Tools to Find Root Cause Faster

Mon, 01 Jan 0001 00:00:00 +0000