The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / microsoft-sql-server / microsoft-sql-server-lock-escalation

Operations Guides

SQL Server lock escalation: when row locks become a table lock and block everyone

A batch UPDATE or DELETE runs longer than usual. CPU looks fine, I/O looks fine, and then dozens of sessions start waiting on LCK_M_* waits, all blocked by the batch session. By the time you log in, the worker thread pool is draining and the instance is heading toward THREADPOOL. The root cause is not a hung transaction or a resource bottleneck. It is lock escalation: SQL Server traded thousands of row locks for a single table lock, and every other session that wants to touch that table is now serialized behind it.

Lock escalation is a memory conservation mechanism, not a bug. The lock manager cannot track an unbounded number of locks per transaction. When a single statement crosses a threshold on a single table reference, the engine escalates the entire set of row and page locks on that HoBt (heap or B-tree) to one TABLE-granularity lock. The savings in lock memory come at the cost of concurrency. On a large, intended batch operation that is the right trade. On a transaction that was supposed to touch a few hundred rows but is scanning millions because of a bad plan, escalation is the symptom that turns a slow query into a system-wide stall.

This article covers how to recognize escalation while it is happening, what triggers it, how to distinguish it from ordinary blocking and deadlocks, and how to prevent recurrence.

What this means

Lock escalation is the engine converting many fine-grained locks held by one transaction on one table reference into a single coarse-grained lock on that table. The escalated lock is always at TABLE granularity (shared or exclusive, depending on the locks being escalated), never at page granularity. Once escalation happens, every other session that needs a conflicting lock on that table waits behind the holder until the transaction commits or rolls back.

The trigger most operators learn first is the lock-count threshold: when a single statement holds roughly 5000 row or page locks on a single non-partitioned table or index reference, the lock manager escalates. In practice the mechanism fires a little higher, because the lock manager checks at fixed intervals of held-lock count, and the HoBt-level counter that drives the decision excludes the table lock itself and the lock currently being acquired. A simple scan that takes locks one at a time typically escalates around 6250 total held locks rather than exactly 5000. Monitoring for exactly 5000 locks held will miss the event.

A second trigger is less obvious. If lock memory exceeds roughly 40 percent of the lock memory cap (which itself is about 60 percent of the buffer pool, so roughly 24 percent of buffer pool size), escalation can fire on a statement regardless of how many locks it personally holds. This memory-pressure escape valve explains why escalation can appear on workloads that never seem to cross the row-count threshold.

flowchart TD
    A[Batch UPDATE/DELETE starts] --> B[Row/page locks accumulate]
    B --> C{~5000-6250 locks
on one HoBt?} C -- No --> B C -- Yes --> D[Lock manager escalates
to single TABLE lock] D --> E[Row/page locks released,
TABLE lock held to commit] E --> F[Other sessions request
conflicting locks] F --> G[LCK_M_* waits rise] G --> H[Workers pile up] H --> I[THREADPOOL waits
if pool drains]

The signature that distinguishes escalation from ordinary blocking is the granularity of the held lock. Ordinary blocking chains are row, key, or page locks on specific objects. Escalation produces a TABLE lock held by one session while many unrelated sessions wait. The signature that distinguishes it from a deadlock is that there is no cycle: the head blocker is making progress (or will, once it commits), and the deadlock monitor will not intervene.

Common causes

CauseWhat it looks likeFirst thing to check
Large batch UPDATE/DELETE with no batchingOne session holds X table lock, many sessions wait on LCK_M_Xsys.dm_exec_requests for the head blocker statement and affected row estimate
Plan regression scanning more rows than intendedStatement that usually touches hundreds of rows now holds millions of locksQuery Store plan comparison for the regressed query
Missing supporting index on the predicateUPDATE or DELETE plan shows a clustered index scanExecution plan, look for a scan where a seek was expected
SELECT escalating to a shared table lockRead query under read committed with a bookmark lookup using PREFETCHresource_description of the escalated lock in dm_tran_locks
UPDLOCK scan where no rows qualifyU locks held on scanned rows, then X table lock even though zero rows matchedWhether the predicate is sargable and supported by an index
LOB columns accessed by referenceSELECT projecting varchar(max) / nvarchar(max) escalates unexpectedlySchema for LOB columns and the access method in the plan
Memory pressure tripEscalation on a session holding far fewer than 5000 locksMEMORYCLERK_SQLBUFFERPOOL size and process_physical_memory_low

Quick checks

These are read-only and safe to run during an active incident.

-- Find current blocking chains and the head blocker
SELECT
    r.session_id AS blocked_session,
    r.blocking_session_id AS blocker,
    r.wait_type,
    r.wait_time / 1000 AS wait_seconds,
    DB_NAME(r.database_id) AS database_name,
    t.text AS blocked_query_text
FROM sys.dm_exec_requests r
CROSS APPLY sys.dm_exec_sql_text(r.sql_handle) t
WHERE r.blocking_session_id <> 0
ORDER BY r.wait_time DESC;
-- Inspect the lock granularity held by the head blocker
-- A resource_type of OBJECT with request_mode S or X is the escalation signature
SELECT
    tl.resource_type,
    tl.resource_subtype,
    tl.resource_database_id,
    tl.resource_associated_entity_id,
    tl.request_mode,
    tl.request_status,
    tl.request_session_id
FROM sys.dm_tran_locks tl
WHERE tl.request_session_id = <head_blocker_session_id>
ORDER BY tl.resource_type;
-- Confirm whether the head blocker is the source or itself blocked
SELECT
    s.session_id,
    s.login_name,
    s.host_name,
    s.program_name,
    s.status AS session_status,
    s.last_request_start_time,
    t.text AS last_query_text,
    (SELECT COUNT(*) FROM sys.dm_exec_requests r2
     WHERE r2.blocking_session_id = s.session_id) AS sessions_blocked
FROM sys.dm_exec_sessions s
CROSS APPLY sys.dm_exec_sql_text(s.most_recent_sql_handle) t
WHERE s.session_id = <head_blocker_session_id>;
-- Check the wait profile. A surge of LCK_M_* waits
-- with low CPU and low PAGEIOLATCH points to blocking, not resource starvation
SELECT TOP 15
    wait_type,
    waiting_tasks_count,
    wait_time_ms,
    signal_wait_time_ms,
    wait_time_ms - signal_wait_time_ms AS resource_wait_time_ms
FROM sys.dm_os_wait_stats
WHERE wait_type LIKE 'LCK_M_%'
  AND waiting_tasks_count > 0
ORDER BY wait_time_ms DESC;

How to diagnose it

  1. Confirm you are in a blocking pattern, not a resource bottleneck. CPU low, I/O low, many sessions suspended on LCK_M_* waits in sys.dm_exec_requests. If PAGEIOLATCH_* or SOS_SCHEDULER_YIELD dominates instead, escalation is not your problem.

  2. Identify the head blocker. Use the blocking-chain query above. Note whether the head blocker is running (making progress) or sleeping (idle with an open transaction). A sleeping head blocker is a different problem: an uncommitted transaction. An escalating head blocker is running a large DML statement.

  3. Check the lock granularity the head blocker holds. Query sys.dm_tran_locks for that session. The escalation signature is a single OBJECT-granularity lock in mode S or X on the table, with the previous row and page locks released.

  4. Capture the escalating statement. Pull sql_handle from sys.dm_exec_requests for the head blocker and get the plan via sys.dm_exec_query_plan. Look for a scan or a seek that is estimated to touch far more rows than the application intended.

  5. Confirm with Query Store. If Query Store is enabled, look for the same query_hash over the last several days. A regression from thousands of logical reads to millions, coinciding with a plan change, is the smoking gun.

  6. Verify against an Extended Events session for lock_escalation. The system_health session does not capture this by default; you will need a dedicated session. Microsoft documents the lock_escalation event as the way to monitor escalation but publishes no session template, so a dedicated session is the standard approach.

Metrics and signals to monitor

SignalWhy it mattersWarning sign
LCK_M_* waits as a share of total waitsLock waits are the direct symptom of any blocking patternSudden rise above 30 to 40 percent of total waits with no maintenance window
Blocking chain depth and durationThe cascade that turns a slow query into worker exhaustionChain deeper than 5 sessions, or any single block over 60 seconds
Worker thread utilizationEscalation cascades consume workers one blocked session at a timeActive workers sustained above 80 percent of max_workers_count
Batch requests/sec vs transactions/sec ratioRequests arrive but nothing commits during a blocking cascadeBatch requests stable or rising while transactions/sec drops
Head blocker statusA sleeping head blocker needs different remediation than a running oneHead blocker status = sleeping with open_transaction_count > 0
lock_escalation Extended EventsDefinitive confirmation that escalation occurredAny event during business hours on a production table

Fixes

Batch the large DML

The most reliable fix is to not cross the threshold. Rewrite single huge UPDATE or DELETE statements as loops that process rows in chunks of a few thousand, with BEGIN TRAN and COMMIT around each chunk. Each chunk stays under the escalation threshold, releases its locks at commit, and lets blocked sessions proceed. Choose a chunk size with headroom below 5000 locks per reference, not exactly at it.

Add the index the plan expected

If the escalating plan is scanning because the predicate is not supported by an index, adding a covering index turns a table scan into a targeted seek. Fewer rows touched means fewer locks taken means no escalation. This is the highest-leverage long-term fix because it also reduces I/O, memory grant pressure, and log volume.

Correct the plan regression

When Query Store shows the query used to seek and now scans, force the known-good plan with sp_query_store_force_plan (revertible with sp_query_store_unforce_plan). Alternatively, clear the bad plan with DBCC FREEPROCCACHE(plan_handle). This is disruptive: it forces recompilation on the next call, which can spike CPU if the query is hot. Long-term, address the underlying statistics staleness or parameter sniffing with OPTIMIZE FOR hints, OPTION (RECOMPILE), or Query Store automatic plan correction where available.

Tame read-side escalations

SELECT statements can escalate too, particularly under read committed with bookmark lookups using PREFETCH, or when projecting LOB columns accessed by reference. Adding a covering index that satisfies the SELECT without a lookup, or revisiting whether the query needs to project LOB columns, removes the lock accumulation.

Set LOCK_ESCALATION per table, surgically

ALTER TABLE ... SET (LOCK_ESCALATION = ...) controls behavior per table.

  • TABLE (default): escalation goes to the table, as described above.
  • AUTO: on a partitioned table, escalation targets the partition instead of the whole table. Useful when a large operation touches one partition but should not block access to other partitions.
  • DISABLE: escalation is suppressed for that table in most cases. It can prevent the cascade you are seeing, but it forces the lock manager to keep tracking row and page locks, which costs memory and can move you toward the memory-pressure trigger instead. Use it on specific hot tables after batching and indexing have been considered.

Trace flags 1211 and 1224, as a last resort

Trace flag 1211 disables lock escalation globally. Trace flag 1224 disables the lock-count trigger but still allows escalation under memory pressure. If both are set, 1211 takes precedence. These are instance-wide and change the concurrency behavior of every database on the instance. They are appropriate for specific, well-understood workloads and dangerous as a default. The ROWLOCK hint is not a substitute: it affects initial lock granularity but does not prevent escalation.

Prevention

  • Batch every large DML by default. Treat any single statement that could touch more than a few thousand rows as a code smell. This single discipline prevents most escalation incidents.

  • Make sure predicates are indexable. Non-sargable predicates (functions on the column, implicit conversions, leading wildcards) force scans, and scans on large tables force escalation.

  • Watch plan regressions before users do. Query Store is the right tool. Alert on queries whose average duration or logical reads jumped by an order of magnitude after a plan change.

  • Do not disable escalation globally as a precaution. The memory pressure escape valve exists for a reason. Disabling it instance-wide trades one failure mode for another that is harder to diagnose.

  • On SQL Server 2025 and later, evaluate Optimized Locking. Optimized Locking (TID-based locking combined with Lock After Qualification) releases row locks immediately after each row is modified and holds a single lock on the transaction ID until commit. With it enabled, escalation becomes far less likely because the number of held locks at any instant is dramatically lower. It must be enabled per database and requires Accelerated Database Recovery. Microsoft documents Optimized Locking for SQL Server 2025 (not for SQL Server 2022 or older); the availability table lists no edition restriction.

  • Track escalation events over time. A standing Extended Events session for lock_escalation, even if it only writes to a ring buffer for spot checks, lets you see whether a code change actually reduced escalation frequency or just moved it to a different table.

How Netdata helps

  • Correlate the escalation signature directly. When LCK_M_* wait time spikes while CPU utilization and PAGEIOLATCH_* stays low, per-second metrics make the blocking pattern visible immediately rather than something you reconstruct after the fact from cumulative DMVs.

  • Watch the cascade form in real time. Per-second blocking chain depth, worker thread utilization, and the batch-requests-versus-transactions divergence are the leading indicators that an escalation has begun cascading toward THREADPOOL.

  • Distinguish escalation from resource stalls. Lock escalation looks like the database is frozen with the CPU idle. Memory pressure and I/O saturation look similar from the outside. Correlated resource panels (CPU, memory grants pending, I/O stall, PLE per NUMA node) let you rule those out without a second tool.

  • Baseline wait statistics as a time series. sys.dm_os_wait_stats is cumulative since startup. A single snapshot is nearly useless for diagnosing current behavior. Persisted, sampled wait stats let you see the moment LCK_M_* overtook other waits, which is the moment escalation began.

Netdata’s Microsoft SQL Server monitoring brings these signals together with per-second metrics and ML anomaly detection.

The Netdata solution

Microsoft SQL Server monitoring with Netdata

Netdata monitors SQL Server with per-second metrics, pre-built dashboards, and ML-powered anomaly detection. Correlate wait statistics, blocking chains, transaction-log and TempDB pressure, Page Life Expectancy, memory grants, per-file I/O stalls, and AlwaysOn send/redo queues against the rest of your stack so you catch the incidents in these runbooks before they page anyone.