The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / ceph / ceph-rgw-latency

Operations Guides

Ceph RGW GET/PUT latency: S3 request latency and queue length

When users report slow S3 GET or PUT responses, the RGW daemon is rarely the root cause. RADOS Gateway is a stateless HTTP frontend that translates REST calls into RADOS object operations. Its observed latency is dominated by the time those underlying operations take, plus whatever queuing happens when the gateway has more in-flight work than it can drain.

The RGW perf counters expose two distinct kinds of signal: per-operation latency accumulators (ceph_rgw_op_get_obj_lat_sum/_count and ceph_rgw_op_put_obj_lat_sum/_count) for the S3 operations themselves, plus queue gauges (ceph_rgw_qlen and ceph_rgw_qactive) that show whether requests are piling up inside the daemon. Treating those signals together is the difference between “S3 is slow” and “S3 is slow because one OSD hosting a bucket index shard is in OMAP collapse.”

What it means

The exact Prometheus-facing metric names depend on which Ceph version and exporter you run. Recent ceph-exporter builds expose the latency counters as ceph_rgw_op_global_get_obj_lat_sum/_count and ceph_rgw_op_global_put_obj_lat_sum/_count, while older builds and the internal perf counters drop the _global_ infix. The semantics are identical: use whichever name your collector exposes.

Average latency for an interval is the rate of the _sum counter divided by the rate of the _count counter:

# Average GET latency per object, by RGW instance (seconds)
rate(ceph_rgw_op_get_obj_lat_sum[5m])
  /
rate(ceph_rgw_op_get_obj_lat_count[5m])

The unit is seconds. The _sum accumulator covers the full request lifetime inside RGW: frontend parsing, bucket index lookup, RADOS read or write, and response streaming. PUT averages are dominated by write latency; GET averages by read latency and object size.

The two queue gauges tell you whether the gateway is the bottleneck or just the messenger.

MetricMeaning
ceph_rgw_qlenNumber of operations waiting in the RGW internal queue.
ceph_rgw_qactiveNumber of operations actively being processed.

A sustained mismatch between the two is the diagnostic. If qactive is high but qlen is low, the daemon is busy and keeping up. If qlen climbs while qactive plateaus, threads are blocked waiting on RADOS and the queue is draining slower than it is filling. That is the pattern that says “look below RGW.”

An example alerting condition for this pattern:

# Queue length disproportionate to request rate
ceph_rgw_qlen / (rate(ceph_rgw_req[5m]) + 1) > 10

Sustained for more than 300 seconds, this means the queue is growing out of proportion to incoming traffic. The +1 guards against divide-by-zero on idle gateways.

Common causes

CauseWhat it looks likeFirst thing to check
Slow OSDs underneathRGW latency rises across multiple gateways; OSD apply or commit latency elevated on a subset of OSDsceph osd perf
OMAP storm on bucket indexLIST and PUT latency spike on a specific bucket; LARGE_OMAP_OBJECTS health check active; OSDs hosting the index pool show slow ops with omap_iterator in the logceph health detail, radosgw-admin bucket stats
Capacity pressureLatency climbs as cluster approaches nearfull; backfill stalls appear; writes fail outright when an OSD hits full ratioceph osd df tree, ceph df
RGW-side saturationSingle gateway’s qlen and qactive climb while peer gateways stay idle; CPU, NIC, or file descriptor limits on the RGW host are peggedtop, ss -tin, lsof -p <rgw-pid>
Recovery or scrub contentionLatency spike correlates with a recent OSD failure or scheduled deep-scrub window; recovery rate is high; slow ops appearceph -s, ceph pg dump

Quick checks

These are safe, read-only commands. Run them in roughly this order. Note that ceph daemon commands require access to the admin socket (root or the ceph user).

# Top-level cluster state, including recovery and scrub lines
ceph -s

# Per-OSD commit and apply latency. Sort to find outliers.
ceph osd perf

# Per-pool read/write IOPS and bytes
ceph osd pool stats

# Per-OSD capacity, hierarchical view
ceph osd df tree

# Slow ops in flight on a specific OSD; "currently waiting for" tells you where they are stuck
ceph daemon osd.<id> dump_ops_in_flight

# Health detail, including LARGE_OMAP_OBJECTS, OSD_NEARFULL, SLOW_OPS
ceph health detail

# Per-bucket object count and shard count
radosgw-admin bucket stats --bucket=<bucket-name>

# RGW-side perf counters, including get_obj_lat / put_obj_lat internals
ceph daemon rgw.<id> perf dump | jq '.rgw'

How to diagnose it

RGW latency is downstream of RADOS latency. Diagnose top-down.

flowchart TD
    A[RGW GET/PUT latency rising] --> B{OSD apply/commit latency elevated?}
    B -->|No| C[Investigate RGW host: CPU, NIC, fd limit]
    B -->|Yes, cluster-wide| D{Recovery or deep scrub active?}
    B -->|Yes, isolated OSDs| E{LARGE_OMAP_OBJECTS active?}
    D -->|Yes| F[Throttle recovery and scrub]
    D -->|No| G[Check cluster-network saturation]
    E -->|Yes| H[Reshard bucket index]
    E -->|No| I[Check SMART and BlueStore DB spillover]
  1. Confirm RGW is not the source. Check whether ceph_rgw_qlen and ceph_rgw_qactive are elevated across all RGW instances or just one. A single-instance spike points to the RGW host: CPU saturation, NIC saturation, file descriptor limits, or TLS termination overhead. A cluster-wide spike points below.

  2. Cross-reference OSD latency. Plot ceph_osd_apply_latency_ms and ceph_osd_commit_latency_ms against the RGW latency series. A clean correlation confirms the bottleneck is in RADOS. If a small number of OSDs are outliers, those OSDs are blocking the PGs that RGW is reading from or writing to.

  3. Check whether slow ops are present. ceph_healthcheck_slow_ops > 0 means operations have exceeded osd_op_complaint_time (default 30 seconds). Those operations are stuck, not just slow. Use ceph daemon osd.<id> dump_ops_in_flight and read the “currently waiting for” field of each slow op: waiting for subops from indicates a replication stall, waiting on pg indicates peering, waiting for rw locks indicates lock contention, and “reached pg but stalled” indicates a local device issue.

  4. Rule out OMAP storms. If latency spikes coincide with LIST or PUT operations against one or two large buckets, check ceph health detail for LARGE_OMAP_OBJECTS. OSD logs in the worst cases show lines mentioning omap_iterator with latencies in tens of seconds. Identify affected buckets with radosgw-admin bucket stats and inspect shard count versus object count.

  5. Rule out capacity pressure. Capacity and latency couple at nearfull (default 0.85). At backfillfull (default 0.90) recovery is blocked. At full (default 0.95) all writes fail. Even before those thresholds, individual OSDs that are disproportionately full become write hotspots.

  6. Rule out BlueStore DB spillover. If a single OSD shows high commit latency but its data device is healthy, check whether RocksDB has spilled from the fast DB partition to the slow data partition: ceph daemon osd.<id> perf dump | jq '.bluefs | {slow_used_bytes, slow_total_bytes}'. Any nonzero slow_used_bytes means the OSD has hit the performance cliff.

  7. Rule out recovery and scrub contention. Recovery and deep scrub compete with client I/O on the same disks and the same cluster network. ceph -s shows active recovery and scrub; correlation with the latency spike is usually obvious.

Metrics and signals to monitor

SignalWhy it mattersWarning sign
ceph_rgw_op_get_obj_lat_sum / _countAverage S3 GET latency seen by clientsSustained climb above baseline
ceph_rgw_op_put_obj_lat_sum / _countAverage S3 PUT latency seen by clientsSustained climb above baseline
ceph_rgw_qlenQueue depth inside the RGW daemonClimbs while qactive plateaus
ceph_rgw_qactiveConcurrent in-flight operationsPegged at thread limit on one RGW
ceph_rgw_failed_reqAborted requests (client disconnects, not HTTP 4xx/5xx)rate(failed_req) / rate(req) > 0.05 sustained
ceph_rgw_op_get_obj_bytes, ceph_rgw_op_put_obj_bytesThroughput for GET and PUT, useful to separate latency from bandwidth issuesThroughput flat while latency climbs means queueing, not slow links
ceph_osd_apply_latency_ms, ceph_osd_commit_latency_msUnderlying OSD speed, the floor under RGW latencyAny OSD more than 5x the median for its device class
ceph_healthcheck_slow_opsOperations stuck past 30 secondsAny nonzero value sustained more than 120s
ceph_health_detail{name="LARGE_OMAP_OBJECTS"}Bucket index OMAP has outgrown its shard countActive
ceph_health_detail{name="OSD_NEARFULL"}Approaching capacity cliffActive
ceph_rgw_gc_retire_objectRGW garbage collection progressNear-zero rate while cluster is nearfull

Fixes

Slow OSDs

Identify the outlier OSD with ceph osd perf. If a disk is failing, replace it; SMART data via ceph device get-health-metrics <devid> usually confirms. If the OSD is healthy but hot, reweight it lower with ceph osd reweight <osd-id> 0.9 (the OSD ID is a plain integer) to shed placement-group load. For BlueStore DB spillover, plan a ceph-bluestore-tool migration to a larger DB device, which requires OSD downtime.

OMAP storm on bucket index

Confirm with radosgw-admin bucket stats --bucket=<name>. Rule of thumb: each index shard should hold no more than roughly 100,000 entries, controlled by rgw_max_objs_per_shard (default 100,000). Check the reshard queue with radosgw-admin reshard list. Trigger a manual reshard if dynamic resharding has stalled. Resharding has been an online operation since Luminous: reads continue during the index rebuild and writes to the bucket are blocked only briefly. Scheduling resharding during low-traffic windows is still prudent for very large buckets.

Be aware that dynamic resharding has historically been able to reshard the same buckets repeatedly without dropping old index objects. If OMAP growth looks runaway, compare radosgw-admin bucket stats over time and check for stale index shards.

Capacity pressure

The fix is capacity. Delete data, add OSDs, or force RGW garbage collection with radosgw-admin gc process. Reweight overly full OSDs downward. Raising mon_osd_full_ratio is a last resort and only buys time.

RGW-side saturation

If only one gateway is slow, add capacity: more RGW instances behind the load balancer, more CPU on the host, or larger file descriptor limits. Confirm TLS termination is offloaded if RGW is handling it directly. For Beast frontend issues, ensure you are on a current patched Ceph release.

Recovery and scrub contention

Throttle recovery on the fly: ceph tell osd.* injectargs '--osd_max_backfills 1 --osd_recovery_max_active 1'. Set noscrub and nodeep-scrub temporarily during the incident, then unset them as soon as client latency recovers. Leaving those flags set indefinitely is one of the most common preventable Ceph failures.

Prevention

  • Monitor per-OSD latency, not cluster averages. One OSD at 200ms while the cluster median is 5ms is the typical cause of intermittent RGW latency outliers.
  • Track bucket growth against shard count. Alert when any bucket exceeds roughly 100,000 objects per shard. Reshard on your schedule, not in an incident.
  • Watch for OMAP accumulation. LARGE_OMAP_OBJECTS is a late signal. Per-bucket object-count trends give earlier warning.
  • Size BlueStore DB partitions for OMAP growth. RGW bucket indexes live in RocksDB. Default sizing guidance assumes moderate OMAP usage; RGW-heavy clusters need more DB space.
  • Revisit recovery throttle settings as the cluster grows. Defaults that were safe with 20 OSDs can cause cascading failures with 200.
  • Treat noscrub and nodeep-scrub as state, not actions. Alert if either is set for more than 24 hours without a matching maintenance window.
  • Monitor RGW garbage collection rate. A near-zero ceph_rgw_gc_retire_object rate on a nearfull cluster means deleted data is not actually being reclaimed.

How Netdata helps

  • The Netdata Ceph collector pulls ceph_rgw_op_*_obj_lat_sum/count, ceph_rgw_qlen, ceph_rgw_qactive, and ceph_rgw_req at per-second resolution, so you can see queue buildup in real time rather than as a five-minute average.
  • Per-second OSD apply and commit latency lets you visually correlate an RGW latency spike with the specific OSD that caused it, without running ceph osd perf repeatedly by hand.
  • ceph_healthcheck_slow_ops and ceph_health_detail labels including LARGE_OMAP_OBJECTS, OSD_NEARFULL, and SLOW_OPS render alongside the RGW latency chart, so the cause sits on the same dashboard as the symptom.
  • The anomaly advisor can catch qactive flat-lining while qlen climbs before average latency crosses a static threshold. That pattern is the precursor to user-visible latency.
  • BlueStore bluefs slow-device usage and RocksDB counters are collected per OSD, which is what you need to distinguish “slow disk” from “DB spillover” without dropping into the admin socket.