The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / mongodb / mongodb-cache-undersized-working-set

Operations Guides

MongoDB cache too small: sizing the WiredTiger cache for your working set

When MongoDB latency doubles and disk read IOPS climb, operators usually check indexes and the query planner first. If db.currentOp() shows no runaway query and the slow query log is quiet, the culprit is often the WiredTiger cache.

WiredTiger maintains its own in-memory cache of uncompressed B-tree pages, separate from the OS page cache. MongoDB defaults the cache to max(0.5 * (RAM - 1 GB), 256 MB). That default works for a single mongod on a dedicated host, but it breaks down in containers, multi-tenant deployments, and during organic data growth. Once the working set exceeds the cache, reads fault to disk, pages are decompressed, and eviction threads compete with application threads for CPU.

The sections below cover sizing mechanics, common misconfigurations, and the production signals that precede inline eviction stalls.

What it is and why it matters

WiredTiger stores documents and indexes as uncompressed B-tree pages in its own cache. The OS page cache still holds the compressed on-disk representation. On a cache miss, WiredTiger reads from disk, decompresses the page, and loads it into the cache. If the cache is full, pages are evicted.

Because a page evicted from WiredTiger may still reside in the OS page cache, re-access avoids a physical disk read but still pays the decompression cost. When both caches are too small to cover the working set, every access becomes a physical disk read.

The default cache size is max(0.5 * (RAM - 1 GB), 256 MB). A 16 GB instance yields 7.5 GB; a 1 GB instance hits the 256 MB floor. You can override the default with --wiredTigerCacheSizeGB, though that change requires a process restart; since MongoDB 6.0, wiredTigerEngineRuntimeConfig can also resize the cache on a running server (the runtime change does not persist across restarts).

The working set is the subset of data and indexes your application touches in a typical window. It is rarely the full database size. A 1 TB database with a 10 GB working set runs comfortably in a 12 GB cache. A 100 GB database with a 90 GB working set suffocates in the same cache. When the working set exceeds the cache, the database enters constant churn: pages read in and evicted out, page faults rise, and latency couples to disk performance.

How it works

WiredTiger uses an LRU-like eviction system with multiple thresholds. Background eviction threads begin cleaning pages when the cache reaches roughly 80 percent fill. If fill climbs toward 95 percent, eviction becomes aggressive. If background threads cannot keep pace, application threads perform eviction inline before resuming their own work. That is the moment user-visible latency spikes.

WiredTiger distinguishes between clean and dirty eviction. Clean pages, which have not been modified since the last checkpoint, can be dropped quickly. Dirty pages must be reconciled and written to disk before their memory is reclaimed. A write-heavy workload therefore stresses both eviction and checkpoint subsystems simultaneously. If the cache is oversized relative to disk throughput, dirty data accumulates faster than the storage layer can flush it, turning a cache-size problem into a disk-queuing problem.

Dirty pages also drive checkpoint behavior. WiredTiger checkpoints every 60 seconds by default. The dirty ratio is the percentage of cache holding modified data not yet flushed to disk. When dirty data climbs above 20 percent of the cache, aggressive eviction triggers. If checkpoints cannot flush fast enough, write stalls become likely as threads wait for clean pages.

The cache retains old document versions for MVCC. Long-running transactions, cursors with noCursorTimeout, or large aggregation pipelines can pin old snapshots, preventing eviction and inflating the fill ratio even when the working set itself is stable.

flowchart TD
  A[Host RAM] --> B[OS Page Cache]
  A --> C[WiredTiger Cache]
  C --> D[Uncompressed B-tree Pages]
  D --> E{Working Set Fit}
  E -->|Fits| F[Low latency queries]
  E -->|Exceeds| G[Cache miss]
  G --> H[Disk read into OS cache]
  H --> I[Decompress to WiredTiger]
  I --> J[Eviction pressure]
  J --> K[Application threads evict]
  K --> L[Latency spikes]

Where it shows up in production

Containers are the most common place cache sizing goes wrong. Modern mongod versions attempt to detect cgroup memory limits, but detection is not guaranteed across all runtimes, versions, and cgroup configurations. If detection fails, mongod sizes the cache against host RAM. On a 64 GB host, an unconfigured mongod in a 4 GB pod could allocate roughly 31.5 GB and trigger an immediate OOM kill. Explicitly set --wiredTigerCacheSizeGB to roughly 50 percent of the container memory limit minus 1 GB, and always leave headroom for the runtime and sidecars.

On bare metal or VMs, the default formula assumes a single mongod instance owns the machine. Running multiple mongod processes, or collocating mongod with application servers, without reducing each cache proportionally causes aggregate memory oversubscription. The OS may swap, or the OOM killer may terminate processes.

Consider setting vm.swappiness to 1 on dedicated database hosts. Avoid disabling swap entirely unless you have confirmed OOM killer behavior is acceptable, because a system without swap can kill processes rather than degrade gracefully. Changing this requires root and should be validated in a non-production environment first.

Organic data growth is the silent cause. A cache that was generous at launch becomes tight six months later as hot indexes and documents expand. Because changing the cache size persistently requires a rolling restart, operators often tolerate gradual degradation until a traffic spike converts a 5 ms p99 into a 500 ms p99.

Sizing rules and tradeoffs

Use the default only when mongod is the sole memory consumer on a stable, dedicated host. In containers, calculate --wiredTigerCacheSizeGB as roughly 50 percent of the container memory limit minus 1 GB, respecting the 256 MB floor. Leave headroom for connection buffers and thread stacks, the OS page cache, and internal overhead of roughly 500 MB to 1 GB.

For example, a pod with a 16 GB memory limit should set the cache to roughly 7 GB, leaving the remaining 9 GB for the OS page cache, connection overhead, and the container runtime. If the pod also runs a monitoring sidecar or Istio proxy, subtract those allocations before calculating the cache.

Do not size the cache to your total data set. Size it to your working set plus headroom for writes. If you do not know your working set size, use page fault rate as a proxy: after warmup, a sustained high rate of faults indicates the working set exceeds memory.

Write-heavy workloads need extra capacity for dirty pages. Read-heavy workloads benefit from a larger cache, but starving the OS page cache reduces the efficiency of compressed disk reads because compressed pages must be re-read from disk more frequently.

A cache fill of 75 to 80 percent with a low dirty ratio and no application-thread eviction is healthy. WiredTiger is designed to keep the cache nearly full. The dangerous state is 95 percent fill combined with rising application-thread evictions and a climbing dirty ratio.

If you must choose between slightly too small and slightly too large, err slightly large. The cost of an oversized cache is mild memory pressure. The cost of an undersized cache is a latency cascade that can exhaust tickets and stall the instance.

Signals to watch in production

SignalWhat it tells youThreshold to act
Cache fill ratioOccupied percentage of the configured cache.Sustained >80% with rising eviction rates.
Dirty ratioWrite pressure versus checkpoint flush speed.>15% is warning; >20% is critical and triggers aggressive eviction.
Application-thread evictionsQuery threads forced to do eviction work.Any sustained nonzero count adds latency to user operations.
Page faultsWorking set is leaving memory.Sustained high rate after warmup means disk is the hot path.
Checkpoint durationTime to flush dirty data.>30 seconds is concerning; >60 seconds risks write stalls.
Available read/write ticketsStorage engine concurrency headroom.<25% of total available signals queuing and contention.

Pull these metrics from db.serverStatus().wiredTiger.cache. Key fields include bytes currently in the cache, maximum bytes configured, and tracked dirty bytes in the cache. Compare current bytes to maximum to derive the fill ratio. Compare dirty bytes to current bytes to derive the dirty ratio. If the count of pages evicted by application threads grows steadily while background eviction metrics plateau, the eviction system is saturated.

How Netdata helps

Netdata collects wiredTiger.cache metrics from db.serverStatus(), exposing fill ratio, dirty ratio, and eviction counters without manual polling.

Correlating cache utilization with system.pgpgin and disk IOPS distinguishes a cache miss storm from a slow disk subsystem. If cache fill and pgpgin rise together while disk latency stays flat, the working set has exceeded memory. If disk latency rises in parallel, the storage layer itself is the bottleneck.

Composite alerts on cache fill combined with application-thread evictions catch the cascade before ticket exhaustion and request queue depth spikes.

Per-second resolution on opLatencies and cache metrics shows whether a latency spike coincides with eviction pressure or an independent query regression.

The Netdata solution

MongoDB monitoring with Netdata

Netdata monitors MongoDB with per-second metrics and automatic dashboards. Watch WiredTiger cache pressure, oplog window, connection counts, checkpoint stalls, and replication health in one place, correlated with the underlying host.