The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / microsoft-sql-server / microsoft-sql-server-error-1205-deadlock-victim

Operations Guides

SQL Server Error 1205: transaction was deadlocked and chosen as the deadlock victim

The error text returned to the client is explicit:

Transaction (Process ID %d) was deadlocked on %.*ls resources with another process and has been chosen as the deadlock victim. Rerun the transaction.

%d is the SPID. %.*ls names the resource type, typically lock. The message tells the application to rerun the transaction but not why the deadlock happened, which resource was contended, or which other session was involved. To answer those questions you need the deadlock graph.

Error 1205 is unusual in one operational respect: by default it is not written to the SQL Server error log or the Windows Application Event Log. It is delivered only to the client. If your monitoring assumes error-log scanning, you will miss it. Many application frameworks catch 1205 and retry transparently, so end users never see it even though the database burns worker threads, log space, and CPU on transactions that get rolled back and re-executed.

A few deadlocks per day on a busy OLTP system may be acceptable. A sustained rate, a sudden jump from baseline, or a deadlock storm is a design or workload problem. This page covers what to check, how to pull the deadlock graph from the system_health Extended Events session, and which patterns to look for.

What this means

A deadlock is a cycle of lock dependency. Two or more sessions each hold a lock the other needs, and neither can proceed. SQL Server’s deadlock monitor wakes every ~5 seconds by default. When it detects a deadlock, it selects a victim and rolls the victim’s transaction back. After detection the scan interval drops to as low as 100ms and climbs back to 5 seconds when contention subsides.

Victim selection is deterministic, not random:

  1. Lowest DEADLOCK_PRIORITY wins (default is NORMAL = 0; values range -10 to 10).
  2. If priorities are equal, the transaction with the lowest rollback cost is chosen, measured by log bytes already written.
  3. If both are equal, the victim is chosen arbitrarily.

The victim receives error 1205. The other session proceeds. From the client’s perspective the transaction failed and must be resubmitted.

flowchart TD
    A["Session A: holds Lock X, requests Lock Y"]
    B["Session B: holds Lock Y, requests Lock X"]
    A -- waits on --> B
    B -- waits on --> A
    C["Lock Monitor scans every 5s,
down to 100ms under load"] C --> D{"Pick victim:
lowest DEADLOCK_PRIORITY,
then lowest rollback cost"} D --> E["Victim rolled back,
client receives error 1205"]

Two operational consequences follow. First, the 5-second cadence means deadlocks have already happened before you see them. You cannot intervene live, only analyze and prevent. Second, victim selection is silent. Without an alert on the Number of Deadlocks/sec counter or a captured xml_deadlock_report, you may not know deadlocks are happening at all.

The xml_deadlock_report event is enabled by default in the system_health Extended Events session since SQL Server 2012. The system_health session uses both a ring buffer and an event file. Both roll over, and on a busy instance the ring buffer can age out deadlock graphs in minutes to hours.

Common causes

CauseWhat it looks likeFirst thing to check
Inconsistent lock orderingTwo stored procs update the same tables in opposite order; same pair of sessions deadlocks repeatedlyCompare the input buffers of the two processes in the deadlock graph
Lock escalationOne transaction escalated to a table lock and collided with row-level workLook at the resource list for a table-level lock
Missing nonclustered indexesAn UPDATE or DELETE scans a table, takes many row or key locks, escalates, then collides with another writerPull the victim’s execution plan and check sys.dm_db_missing_index_details
Application retry stormsFramework catches 1205 and retries in a tight loop, immediately re-deadlockingCheck application logs for retry counts; correlate with Batch Requests/sec
Schema changes under loadDDL takes schema modification (Sch-M) locks and collides with concurrent readers or writersCheck for Sch-M locks in the resource list

Quick checks

-- Deadlock count since instance startup (cumulative counter):
SELECT cntr_value
FROM sys.dm_os_performance_counters
WHERE counter_name = 'Number of Deadlocks/sec'
  AND instance_name = '_Total';
-- Take two samples and compute (v2 - v1) / elapsed_seconds.
-- Confirm the system_health session is running and has both targets:
SELECT s.name, s.is_started, st.target_name
FROM sys.dm_xe_sessions s
JOIN sys.dm_xe_session_targets st ON s.address = st.event_session_address
WHERE s.name = 'system_health';
-- Recent deadlock graphs from system_health ring buffer:
SELECT
    xdr.value('(event/@timestamp)[1]', 'datetime2') AS deadlock_time,
    xdr.query('(event/data[@name="xml_report"]/value/deadlock)[1]') AS deadlock_graph
FROM (
    SELECT CAST(target_data AS XML) AS target_data
    FROM sys.dm_xe_session_targets st
    JOIN sys.dm_xe_sessions s ON s.address = st.event_session_address
    WHERE s.name = 'system_health'
      AND st.target_name = 'ring_buffer'
) AS tab
CROSS APPLY target_data.nodes('RingBufferTarget/event[@name="xml_deadlock_report"]') AS xed(xdr);
-- Top lock-related waits to confirm deadlocks are part of a broader contention pattern:
SELECT wait_type, waiting_tasks_count, wait_time_ms,
       wait_time_ms - signal_wait_time_ms AS resource_wait_ms
FROM sys.dm_os_wait_stats
WHERE wait_type LIKE 'LCK_M_%'
ORDER BY wait_time_ms DESC;
-- Currently active blocking chains (a near-miss for a future deadlock):
SELECT
    r.session_id AS blocked_session,
    r.blocking_session_id AS blocker,
    r.wait_type,
    r.wait_time / 1000 AS wait_seconds,
    DB_NAME(r.database_id) AS database_name
FROM sys.dm_exec_requests r
WHERE r.blocking_session_id <> 0
ORDER BY r.wait_time DESC;

If the ring buffer has rolled over and the graph is gone, fall back to the event_file target. The system_health event file retains up to 10 files of 100 MB each on Standard and Enterprise editions, or 4 files of 5 MB on other editions.

On a busy instance with a high deadlock rate, even the event file can roll over within hours. On Azure SQL Database the system_health session does not exist; you must create your own Extended Events session targeting an Azure Storage blob.

How to diagnose it

  1. Confirm the deadlock actually happened. Take two samples of Number of Deadlocks/sec 60 seconds apart and compute the rate. If the rate is zero, what the application reported as a deadlock may have been a timeout or a wrapped exception.
  2. Pull the deadlock graph from system_health. Use the ring-buffer query above, or fall back to the event file if the ring buffer has rolled over. If neither is available, check Query Store history for the query the victim was running.
  3. Identify the victim. The XML report identifies the victim process by SPID. Cross-reference it to get the input buffer, isolation level, login, and client hostname.
  4. Identify the resources. The report lists each lock involved and whether each process held or wanted it. Note the resource type (object, hobt, page, key, RID) and the lock mode (S, X, U, and so on).
  5. Reconstruct the cycle. Trace which process held what and which process wanted what. The cycle is the bug. Two UPDATE procs touching the same two tables in opposite order is the textbook case. Lock escalation turning two row-lockers into one table-locker and one row-locker is the common modern case.
  6. Find the execution plans. For each process in the graph, pull the plan from Query Store or cache. Look for table scans, missing indexes, and UPDATE statements without a supporting index seek.
  7. Check for retry behavior in the application. If the application caught 1205 and retried in a loop, the same pair of transactions may have deadlocked repeatedly. Look for elevated Batch Requests/sec immediately after the original error, without a corresponding rise in Transactions/sec.

Metrics and signals to monitor

SignalWhy it mattersWarning sign
Number of Deadlocks/secDirect count of deadlocks; the only counter that proves they are happeningAny sustained nonzero value; more than 10 per minute is a storm
xml_deadlock_report XE eventThe only source of the actual resource list and victim identityMissing graphs mean the ring buffer rolled over
LCK_M_* waitsLock wait time indicates the contention that produces deadlocksSustained high average wait time per wait
Blocking chain depth and durationLong blocking chains are near-missesChains deeper than 5 sessions, blocks longer than 60 seconds
Lock escalation eventsSudden escalation to table locks changes the contention patternEscalation on a hot table during normal load
Batch Requests/sec vs Transactions/secA spike in batch requests without a matching rise in transactions suggests retry behaviorRatio change after the first deadlock
Error 1205 in the Windows Event LogMost monitoring tools expect it there; absent by defaultTools report “no deadlock” while retries pile up

To make error 1205 visible to monitoring tools that read the Windows Application Event Log, run this once per instance. This change is instance-wide, applies to every database, persists across restarts, and increases error-log volume. Review it with your DBA team before applying.

-- Instance-wide change. Increases SQL Server error log and Windows
-- Application Event Log volume for every 1205 occurrence.
EXEC master.sys.sp_altermessage
    @message_id = 1205,
    @parameter = 'WITH_LOG',
    @parameter_value = 'true';

Trace flags 1204 and 1222 are deprecated. They write deadlock detail to the SQL Server error log, but Microsoft recommends using the xml_deadlock_report Extended Event instead. Avoid enabling these trace flags on workload-intensive systems due to performance issues.

Fixes

Inconsistent lock ordering

This is the only true deadlock fix at the application layer. If two transactions touch the same set of resources, they must acquire locks in the same order. Common cases:

  • Two stored procedures both UPDATE Order then OrderLine, but in opposite order. Reverse one.
  • A transaction that updates a parent and child table, and another that updates the same pair in reverse order. Standardize the order in a coding convention and enforce it in code review.
  • A trigger that updates another table, creating an implicit second access path. Trace the trigger’s lock acquisition and treat it as part of the outer transaction.

There is no server-side setting that fixes inconsistent ordering. The deadlock graph shows you the exact pair.

Missing indexes forcing wider locks

Without a supporting index, an UPDATE or DELETE that filters on a non-indexed column scans the table and acquires a lock on every row it touches. At approximately 5,000 locks on a single object, SQL Server escalates to a table lock, which then collides with any concurrent writer. Check sys.dm_db_missing_index_details for high-impact missing indexes on the tables in the deadlock graph. Add the index, then verify the victim’s execution plan uses a seek instead of a scan.

This is the most common fix in practice and the one with the broadest impact. It also tends to reduce LCK_M_* wait time and lock memory.

Lock escalation

Escalation itself is usually correct behavior: 5,000 row locks consume more memory than one table lock. The fix is almost never to disable escalation. The fix is to make the transaction take fewer locks in the first place:

  • Batch the operation (delete in 1,000-row chunks with a TOP clause and a loop).
  • Add the supporting index so the operation seeks instead of scans.
  • Move long-running reporting work to a readable AG secondary or to RCSI so it does not take shared locks.

Disabling escalation with ALTER TABLE ... SET (LOCK_ESCALATION = DISABLE) is a last resort. It prevents the table lock but allows the transaction to hold thousands of row locks, which increases lock memory pressure and shifts the deadlock to a different shape.

Retry strategy at the application layer

If deadlocks are rare and the application can safely retry, a retry policy with exponential backoff is acceptable. The risk is silent retries masking a growing problem. At minimum, log every 1205 with the SPID, timestamp, and the operation that failed, and alert on retry count. A retry policy that fires more than a handful of times per minute is a signal that the underlying ordering or index problem needs fixing, not hiding.

Prevention

  • Standardize lock acquisition order across stored procedures and application code that touches the same tables. Enforce in code review.
  • Add supporting indexes for UPDATE and DELETE predicates. Recheck sys.dm_db_missing_index_details after every schema change.
  • Keep transactions short. Every extra statement extends the window during which locks are held.
  • Consider RCSI (ALTER DATABASE ... SET READ_COMMITTED_SNAPSHOT ON) to eliminate reader-writer blocking. This does not fix writer-writer deadlocks but removes one entire class of contention. The cost is TempDB version-store overhead. Enabling RCSI requires exclusive database access on some SQL Server versions and changes concurrency semantics for all sessions using the default READ COMMITTED isolation level. Test before applying.
  • Capture every deadlock graph persistently. The system_health ring buffer is not durable enough for trend analysis. Set up an Extended Events session with an event_file target that writes xml_deadlock_report to disk, sized for your deadlock rate. Alternatively, ship the graphs to your monitoring system.
  • Alert on the Number of Deadlocks/sec counter, not on error log entries. The counter is always present; the error log entry is not.
  • Validate retry policy once per quarter. A retry policy that quietly masked a problem last quarter may now be hiding a regression.

How Netdata helps

  • The Number of Deadlocks/sec counter is collected per second and trended, so you can see the exact moment a deadlock storm starts and correlate it with batch requests, lock waits, and blocking.
  • LCK_M_* wait statistics are sampled with short deltas, exposing the contention that surrounds each deadlock rather than averaging it away over the uptime window.
  • Blocking chain depth and head-blocker identity surface alongside deadlocks, so a near-miss pattern (heavy blocking that did not quite deadlock) shows up in the same window.
  • Correlating deadlock spikes with Batch Requests/sec, Transactions/sec, and CPU reveals retry behavior: a deadlock followed by a request spike without a transaction spike is the signature of an application retry loop.
  • Per-second collection means you catch the 30-second deadlock storm that a 5-minute polling interval would average to zero.

Netdata’s Microsoft SQL Server monitoring brings these signals together with per-second metrics and anomaly detection.

The Netdata solution

Microsoft SQL Server monitoring with Netdata

Netdata monitors SQL Server with per-second metrics, pre-built dashboards, and ML-powered anomaly detection. Correlate wait statistics, blocking chains, transaction-log and TempDB pressure, Page Life Expectancy, memory grants, per-file I/O stalls, and AlwaysOn send/redo queues against the rest of your stack so you catch the incidents in these runbooks before they page anyone.