The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / mysql / mysql-full-table-scans

Operations Guides

MySQL full table scans: Handler_read_rnd_next and the missing index

You get paged because query latency is spiking. Slow_queries is climbing. Handler_read_rnd_next has jumped five-fold over its baseline and keeps rising. Connections, CPU, and buffer pool hit ratio look fine. The culprit is usually a new full table scan after a deploy, schema change, or query pattern shift.

Handler_read_rnd_next increments when the storage engine reads the next row during a table scan or sorted retrieval. In a healthy OLTP system, Handler_read_key dominates and Handler_read_rnd_next stays flat relative to query volume. When the ratio inverts, you are looking at a query plan regression, a missing index, or an optimizer decision gone wrong.

This guide targets OLTP MySQL with InnoDB. Batch jobs and ETL are expected to scan tables; the danger is an unexpected step-change during transactional workload.

What this means

Handler_read_rnd_next is a cumulative, monotonically increasing status counter that tracks sequential row reads. A full table scan of a one-million-row table adds roughly one million to this counter. It increments even when no rows satisfy the WHERE clause.

Handler_read_key tracks index-based lookups. When a query that previously used an index reverts to a table scan, you see a step-change in the rnd_next rate. If that correlates with rising Slow_queries, the scan is the problem.

The direct confirmation is EXPLAIN showing type = ALL and key = NULL, meaning the optimizer found no usable index. Other signals are Select_full_join and rising Sort_merge_passes when scan results are sorted on disk.

flowchart TD
    A[Handler_read_rnd_next step-change >5x] --> B{Rising Slow_queries?}
    B -->|Yes| C[New scan query appeared]
    B -->|No| D[Expected batch/ETL load]
    C --> E[EXPLAIN type=ALL]
    E --> F{Root cause}
    F --> G[Missing index]
    F --> H[Implicit type conversion]
    F --> I[Function on indexed column]
    F --> J[Stale statistics]
    F --> K[Missing replica index]

Common causes

CauseWhat it looks likeFirst thing to check
Missing or dropped indexHandler_read_rnd_next step-change after a deploy or migration; EXPLAIN shows type=ALLEXPLAIN output for key=NULL and possible_keys
Implicit type conversionAn index exists but EXPLAIN lists it in possible_keys while key is NULL; comparing a VARCHAR column to a numeric literalSHOW CREATE TABLE for column types versus query predicates
Function on an indexed columnQuery uses WHERE YEAR(created_at) = 2024; the index on created_at cannot be usedQuery text for functions wrapping column names
Stale optimizer statisticsA new index was added but the optimizer still chooses a scan; cardinality estimates are wrongSHOW INDEX cardinality or run ANALYZE TABLE
Missing index on a replicaReplica lag grows while the source is healthy; replica Handler_read_rnd_next is elevatedSHOW REPLICA STATUS and compare table indexes between source and replica
Sort buffer undersizedLarge ORDER BY or GROUP BY operations spill to disk; Sort_merge_passes rising alongside scansSHOW GLOBAL STATUS LIKE 'Sort_merge_passes'

Quick checks

Run these read-only checks to confirm scope before making changes.

-- Global scan activity versus keyed lookups
SHOW GLOBAL STATUS WHERE Variable_name IN ('Handler_read_rnd_next','Handler_read_key','Slow_queries');
-- Queries responsible for full table scans, ordered by total latency
SELECT * FROM sys.statements_with_full_table_scans LIMIT 10;
-- Tables with the highest cumulative full-scan wait time
SELECT * FROM sys.schema_tables_with_full_table_scans LIMIT 10;
-- Joins without any index usage
SHOW GLOBAL STATUS LIKE 'Select_full_join';
-- Replica scan load and lag (8.0.22+)
SHOW REPLICA STATUS\G
SHOW GLOBAL STATUS LIKE 'Handler_read_rnd_next';
-- Per-query digest efficiency: rows examined versus rows sent
SELECT DIGEST_TEXT, SUM_ROWS_EXAMINED, SUM_ROWS_SENT,
       ROUND(SUM_ROWS_EXAMINED/NULLIF(SUM_ROWS_SENT,0),2) AS examined_to_sent
FROM performance_schema.events_statements_summary_by_digest
ORDER BY SUM_TIMER_WAIT DESC
LIMIT 10;

How to diagnose it

  1. Confirm the regression from baseline. A Handler_read_rnd_next step-change greater than 5x sustained for ten minutes, combined with rising Slow_queries, means a new scan query is active. Exclude expected batch windows.

  2. Isolate the offending query. Query sys.statements_with_full_table_scans to see which digests are scanning. Alternatively, query performance_schema.events_statements_summary_by_digest for digests with a high SUM_ROWS_EXAMINED to SUM_ROWS_SENT ratio. Focus on digests that are new or whose latency recently jumped.

  3. Verify the execution plan. Run EXPLAIN (or EXPLAIN ANALYZE on MySQL 8.0.18+) on the suspect query. Look for type = ALL and key = NULL. If possible_keys lists an index but key is NULL, the optimizer judged the index too expensive, often due to low cardinality or stale statistics.

  4. Check for implicit conversion and function wrapping. Run SHOW CREATE TABLE and compare column types to query predicates. A VARCHAR compared to a numeric literal forces conversion and kills index usage. Look for SQL functions around indexed columns, such as YEAR(), DATE(), or CONCAT(), which prevent index access.

  5. Measure the per-query handler cost. FLUSH STATUS requires the RELOAD privilege. In a dedicated diagnostic session, run:

    FLUSH STATUS;
    -- run the suspect query here
    SHOW SESSION STATUS LIKE 'Handler_read%';
    

    This resets the session counters, executes the query, and shows the delta. Handler_read_rnd_next will be roughly equal to the number of rows scanned.

  6. Check replicas if lag is present. If the source is healthy but replication lag is growing, compare indexes. A missing replica index causes row events to trigger table scans on the applier. Elevated Handler_read_rnd_next on the replica while the source is flat confirms it.

  7. Validate statistics. If an index exists but the optimizer ignores it, run ANALYZE TABLE tablename to refresh cardinality estimates. On MySQL 5.7 (and 8.0 before 8.0.24) this acquires a read lock, so run it during a low-traffic window on large tables; MySQL 8.0.24 and later do not block concurrent operations.

Metrics and signals to monitor

SignalWhy it mattersWarning sign
Handler_read_rnd_next ratePrimary indicator of full table scan volumeStep-change >5x baseline sustained for 10+ minutes
Handler_read_key rateHealthy index lookup baselineRatio to rnd_next collapsing or rnd_next exceeding it
Slow_queries rateConfirms scans are translating to user-visible latencyRising concurrently with Handler_read_rnd_next
Select_full_joinCatches joins with no usable indexAny sustained nonzero rate in OLTP
Innodb_rows_read / Com_selectRows examined per queryRatio climbing significantly above baseline
Sort_merge_passesSort buffer overflow forcing disk mergesRate rising alongside scan activity

Fixes

Add or restore the missing index

If EXPLAIN shows no usable index and the query filters on a column that supports it, add the index. Tradeoff: every additional index slows writes and consumes disk space. For write-heavy tables, prefer composite indexes that satisfy multiple queries over many single-column indexes.

Rewrite predicates to avoid functions on columns

If the query wraps an indexed column in a function, rewrite the predicate to a range. For example, replace WHERE YEAR(created_at) = 2024 with WHERE created_at >= '2024-01-01' AND created_at < '2025-01-01'. Tradeoff: requires application or stored procedure changes.

Fix implicit type conversion

When EXPLAIN lists an index in possible_keys but does not use it, check for type mismatches. Ensure the query passes string literals for VARCHAR columns and numeric literals for integer columns. Tradeoff: may require binding changes in the application or ORM layer.

Force an index hint for emergency relief

If a plan regression appeared suddenly and you need immediate relief, FORCE INDEX can revert to the previous plan. Tradeoff: hints override the optimizer and can make performance worse if data distribution changes later. Remove the hint once the root cause is fixed.

Run ANALYZE TABLE after index changes

After adding an index, the optimizer may still choose a scan if statistics are stale. ANALYZE TABLE tablename updates cardinality estimates. Tradeoff: on MySQL 5.7 (and 8.0 before 8.0.24) this acquires a read lock on large tables for a short duration; MySQL 8.0.24 and later do not block concurrent operations.

Add missing indexes on replicas

If a replica is missing an index that exists on the source, rebuild it. The replica will apply row events using the index and scan rates will drop. Tradeoff: replica write overhead increases, but that is usually preferable to unbounded lag.

Prevention

  • Track the scan-to-lookup ratio. A gradual shift toward Handler_read_rnd_next dominance is an early warning that data growth is outpacing your indexing strategy.
  • Monitor Select_full_join in OLTP. Any sustained nonzero rate means a join is missing an index; latency degrades as table size grows.
  • Lower long_query_time to 1 second or less. The default of 10 seconds hides plan regressions until they become severe enough to cause connection pile-up.
  • Review execution plans before deploys. A single unindexed WHERE clause on a large table can dominate server-wide scan counters.
  • Verify replica index parity in schema changes. Dropping an index on the source without checking replicas guarantees full scans on the applier and growing lag.

How Netdata helps

  • Netdata plots Handler_read_rnd_next and Handler_read_key as per-second rates, making step-changes visible without manual delta calculations.
  • Correlation charts show when Handler_read_rnd_next spikes alongside Slow_queries, Threads_running, or Select_full_join, shortening time to root cause.
  • Per-second resolution catches scan bursts that minute-granularity aggregations smooth over.
  • Netdata automatically baselines throughput signals like Questions and Innodb_rows_read, so a plan regression that raises rows examined per query stands out immediately.
The Netdata solution

MySQL monitoring with Netdata

Netdata monitors MySQL and MariaDB with per-second metrics and ML anomaly detection. Track connection usage, query throughput, slow queries, redo-log pressure, and replication lag alongside the host and storage signals that explain them.