The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / mysql / mysql-thread-cache-churn

Operations Guides

MySQL Threads_created climbing: thread cache churn and missing pooling

When the rate of Threads_created climbs to tens or hundreds of new threads per minute, the thread cache is not absorbing your connection churn. In a pooled deployment this rate should stay near zero. Every cache miss pays the full cost of OS thread creation and initialization, plus a TLS handshake if require_secure_transport is enabled. The first visible symptom is usually connection latency spikes or CPU time diverted to thread management.

What this means

MySQL retains disconnected threads in a cache up to thread_cache_size. A new connection reuses a cached thread when available; otherwise Threads_created increments and a new OS thread is spawned. The counter is cumulative since restart, so the operational signal is the delta over time.

Under the one-thread-per-connection model, every connection holds a dedicated server thread for its lifetime. If the application opens a fresh connection per query or HTTP request, the cache empties and Threads_created tracks Connections almost one-for-one. Even with pooling, aggressive eviction or a thread_cache_size smaller than your connection fluctuation produces sustained thread creation. Each creation adds latency to the handshake; with TLS that cost includes an SSL negotiation.

Because both Threads_created and Connections are cumulative counters, their ratio is a lifetime average, not a real-time miss rate. In a stable, pooled environment that ratio should stay well below 0.01.

flowchart TD
    A[Threads_created climbing] --> B{Threads_cached near thread_cache_size?}
    B -->|Yes| C[Cache too small]
    B -->|No| D{Threads_created tracks Connections?}
    D -->|Yes| E[Missing connection pooling]
    D -->|No| F[Aggressive disconnects]
    C --> G[Increase thread_cache_size]
    E --> H[Add client-side pool or proxy]
    F --> I[Align idle timeouts]

Common causes

CauseWhat it looks likeFirst thing to check
Missing client-side connection poolingMicroservices, serverless functions, or PHP processes open a new connection per request; Threads_created rises in lockstep with ConnectionsApplication connection string and pool configuration
thread_cache_size too smallThreads_cached stays pegged near thread_cache_size while Threads_created climbs steadilySHOW VARIABLES LIKE 'thread_cache_size' against peak Threads_connected
Aggressive pool or proxy evictionConnection pool min idle is zero, or idle timeout is shorter than the typical inter-request interval; periodic disconnect stormsPool idle timeout and MySQL wait_timeout alignment
Traffic spikes or thundering herdSudden Threads_connected burst followed by mass disconnect; cache cannot absorb the churnApplication startup or auto-scaling behavior

Quick checks

-- Check thread creation, cache state, and total connections
SHOW GLOBAL STATUS WHERE Variable_name IN ('Threads_created','Threads_cached','Connections');
SHOW GLOBAL VARIABLES LIKE 'thread_cache_size';
-- Compute the cumulative creation ratio
SELECT ROUND(
  (SELECT VARIABLE_VALUE FROM performance_schema.global_status WHERE VARIABLE_NAME='Threads_created')
  /
  NULLIF((SELECT VARIABLE_VALUE FROM performance_schema.global_status WHERE VARIABLE_NAME='Connections'),0)
, 4) AS threads_created_ratio;
# Sample twice, one minute apart, to get per-minute rate
mysqladmin ext | grep Threads_created
sleep 60
mysqladmin ext | grep Threads_created
-- Check if SSL is enforced, which amplifies thread creation cost
SHOW GLOBAL VARIABLES LIKE 'require_secure_transport';
SHOW GLOBAL STATUS LIKE 'Ssl_accepts';
-- Inspect connection churn: many short-lived sleeps indicate throwaway connections
SELECT COMMAND, COUNT(*), MAX(TIME) AS max_time
FROM information_schema.PROCESSLIST
GROUP BY COMMAND;
-- Check peak connection utilization
SHOW GLOBAL STATUS LIKE 'Max_used_connections';
SHOW GLOBAL VARIABLES LIKE 'max_connections';
-- Look for abnormal disconnects that correlate with churn
SHOW GLOBAL STATUS LIKE 'Aborted_clients';

How to diagnose it

  1. Confirm the rate is abnormal. Threads_created is cumulative. Take two samples one minute apart. A sustained rate above ten threads per minute is operationally significant. Brief spikes during deployments are normal; a sustained climb is not.

  2. Compute the cumulative creation ratio. Divide Threads_created by Connections. If the result is above 0.01 after meaningful uptime, more than one percent of your lifetime connections have triggered expensive thread creation. For active incidents, compare deltas taken over a one-minute window.

  3. Inspect cache saturation. Compare Threads_cached to thread_cache_size. If Threads_cached is consistently at or near the limit and Threads_created is still rising, the cache is too small for your churn. If Threads_cached is well below the limit but Threads_created is high, the problem is connection lifetime, not cache size.

  4. Identify the connection pattern. Query information_schema.PROCESSLIST and group by COMMAND. A high count of Sleep with very short TIME values means connections are being opened and closed rapidly. If Threads_running is low while Threads_connected fluctuates wildly, you have a disconnect storm, not genuine load.

  5. Correlate with application behavior. Map the churn to a specific service, deployment, or serverless function that is opening connections without a pool. Look for frameworks that default to autocommit with no persistent connections.

  6. Check for SSL amplification. If require_secure_transport is ON and Ssl_accepts is climbing alongside Threads_created, each cache miss costs a TLS handshake in addition to thread spawning. The fix is still fewer new connections, but the urgency is higher.

  7. Validate server-side limits. If Max_used_connections is approaching max_connections, thread creation may be compounded by connection retries from rejected clients. See MySQL ERROR 1040 (HY000): Too many connections - causes and fixes.

Metrics and signals to monitor

SignalWhy it mattersWarning sign
Threads_created rateDirect measure of thread cache misses> 10/minute sustained
Threads_created / ConnectionsLong-term cache efficiencyRatio > 0.01
Threads_cachedCurrent cache utilizationStays near thread_cache_size while Threads_created rises
Threads_connected varianceIndicates connection churnRapid oscillation without corresponding traffic spike
Aborted_clientsClient-side connection teardownsRising rate alongside thread creation
Connection_errors_max_connectionsHard rejections from exhaustionNonzero rate

Fixes

Resize the thread cache

If Threads_cached is pinned at thread_cache_size and Threads_created is climbing, increase the cache to cover normal connection fluctuation.

SET GLOBAL thread_cache_size = <N>;

Do not set this arbitrarily high. Each cached thread retains memory for stack and session buffers. If your peak fluctuation is fifty connections, a cache of fifty to one hundred is usually sufficient. If raising the cache does not stop Threads_created from climbing, the root cause is connection lifetime, not cache size.

Implement or fix client-side connection pooling

The durable fix for high Threads_created is to stop opening and closing connections constantly. Ensure every application uses a connection pool such as HikariCP, and that the pool maintains a reasonable minimum idle count. For architectures where persistent pooling is impossible, such as short-lived serverless functions or PHP-FPM without persistent connections, place a proxy such as ProxySQL or MaxScale between the application and MySQL. The proxy maintains persistent backend connections and absorbs the connect/disconnect churn.

Align idle timeouts

When a pool’s minimum idle count is zero or its idle timeout is seconds-long, connections are closed and reopened constantly. Each reopen triggers a cache lookup or thread creation. Worse, if MySQL wait_timeout is shorter than the pool’s idle timeout, MySQL closes the connection from the server side while the pool still believes it is valid, leading to “MySQL server has gone away” errors.

Set the pool idle timeout lower than wait_timeout so the pool always closes gracefully first. Then raise the pool’s minimum idle count to cover typical concurrency so connections survive brief pauses. If the architecture cannot hold idle connections, use ProxySQL or MaxScale to maintain the persistent backend pool and let the application connect and disconnect at will.

Reduce SSL-induced handshake cost

If require_secure_transport is enabled and thread creation remains high, each new connection pays a TLS handshake tax. Do not disable SSL to mitigate this unless you have an explicit risk acceptance. Instead, reduce the number of handshakes by pooling or proxying. The security boundary stays intact while the thread creation rate drops.

Address connection storms

If Max_used_connections is near max_connections, rejected clients may retry in a loop that amplifies thread creation. Increase max_connections only after verifying that memory can support more threads; otherwise you trade thread churn for an OOM kill. The correct response is to fix the leak or storm that is filling the connection slots.

Prevention

  • Monitor Threads_created rate from the first day of production, not after latency degrades.
  • Size thread_cache_size to absorb your observed peak-to-trough connection swing.
  • Require connection pooling in application standards; forbid connect-per-request patterns in microservices.
  • Review pool configuration during every application deploy, especially idle timeout and minimum pool size.
  • Alert on Threads_created / Connections ratio above 0.01, not just absolute connection count.

How Netdata helps

  • Netdata surfaces Threads_created, Threads_cached, Connections, and Threads_connected in real time, so you can see the delta without manual sampling.
  • Correlate climbing Threads_created with Threads_connected spikes and drops to distinguish cache churn from genuine load growth.
  • Alert on Threads_created rate per minute using the built-in MySQL collector.
  • Cross-reference thread creation with Aborted_clients and Connection_errors_max_connections to identify whether the root cause is pool misconfiguration or connection exhaustion.
  • Track thread_cache_size as a configuration metric alongside utilization to detect undersizing immediately after traffic shifts.
The Netdata solution

MySQL monitoring with Netdata

Netdata monitors MySQL and MariaDB with per-second metrics and ML anomaly detection. Track connection usage, query throughput, slow queries, redo-log pressure, and replication lag alongside the host and storage signals that explain them.