The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / mysql / mysql-threads-connected-vs-threads-running

Operations Guides

MySQL Threads_connected vs Threads_running: which one to actually alert on

Threads_connected counts every client holding an open socket, including idle pooled connections. Threads_running counts only threads actively executing a statement. Paging on the first while ignoring the second is a common postmortem mistake. Threads_running relative to CPU cores is the real load signal. The gap between the two metrics diagnoses failure modes. Connection count still deserves a ticket, but rarely a page.

What it is and why it matters

Threads_connected is the number of currently open client connections. It includes connections in any state: actively querying, waiting on a lock, or sleeping. Each connection consumes memory for session buffers and holds a slot against max_connections. When Threads_connected reaches that limit, new connections are rejected with ER_CON_COUNT_ERROR (“Too many connections”). The server reserves one slot for a user with SUPER or CONNECTION_ADMIN, but from the application perspective the instance is full.

Threads_running is the number of threads not sleeping. It counts only connections actively executing a statement. A thread stays in this count while blocked on a lock or I/O; it exits only when the statement finishes and the session returns to sleep. The invariant Threads_connected >= Threads_running always holds. The delta between them is idle, sleeping, or waiting connections.

Check raw values before trusting dashboard ratios:

SHOW GLOBAL STATUS LIKE 'Threads_%';
SHOW GLOBAL STATUS LIKE 'Questions';
SHOW GLOBAL STATUS LIKE 'Connection_errors_max_connections';
SHOW VARIABLES LIKE 'max_connections';

Threads_connected also includes monitoring and administrative sockets. Exclude these from application capacity planning if they hold persistent connections.

A high connection count with near-zero Threads_running indicates an idle pool leak or an overly generous wait_timeout. The server is benign. Conversely, low Threads_connected with spiking Threads_running is a genuine crisis: the database is saturated despite few open connections, usually from fast OLTP queries, lock contention, or buffer pool thrashing. Threads_running measures actual concurrent work, not socket occupancy.

How it works

MySQL’s classic threading model assigns one OS thread per client connection. Threads_connected increments at connect and decrements at disconnect. Threads_running increments when a thread begins executing a statement and decrements only when that statement finishes.

The gap between the two metrics diagnoses specific pathologies. A gap of hundreds indicates idle connections accumulating in the pool. A narrow gap where both metrics are high indicates queries arriving faster than they complete.

When Threads_running rises while the Questions rate stays flat or drops, queries are spending more time waiting than executing. The server is queuing, not accelerating. Under the default one-thread-per-connection model, MySQL typically struggles past roughly 50 concurrently running threads. Once Threads_running consistently exceeds CPU core count, context-switching overhead and contention on internal mutexes dominate. If it climbs toward multiples of core count while throughput collapses, the server is in contention or stall.

On Linux, the OS threads backing these connections are visible under /proc/<mysqld_pid>/task/. In the classic model, the task count roughly tracks Threads_connected, not Threads_running.

Map Threads_running to actual queries with SHOW PROCESSLIST or performance_schema.threads. On MySQL 8.0, filtering PROCESSLIST_COMMAND != 'Sleep' isolates exactly the threads in Threads_running. Grouping by PROCESSLIST_STATE or PROCESSLIST_INFO reveals whether saturation comes from a single query pattern or a broad workload surge.

The thread pool plugin is included only in MySQL Enterprise Edition, a commercial product; it is not available in the community edition. It multiplexes many connections onto fewer worker threads. Under the pool, Threads_running still counts sessions actively executing a statement, but those statements run on shared worker threads, so thresholds derived from OS thread counts become stale because the pool caps parallelism independently.

flowchart TD
    A[MySQL concurrency check] --> B{Threads_running high?}
    B -->|Yes| C{Threads_connected high?}
    C -->|Yes| D[Genuine overload]
    C -->|No| E[Crisis: few connections, high load]
    B -->|No| F{Threads_connected high?}
    F -->|Yes| G[Idle pool leak: investigate]
    F -->|No| H[Normal state]

Where it shows up in production

Idle pool leak. Connection pool frameworks such as HikariCP or application servers often default to pools of 100 or more per instance. With ten application nodes, Threads_connected quickly reaches 1,000 even when the database executes fewer than ten queries concurrently. Threads_connected sits at 400 while Threads_running stays below 5. The server appears saturated on a connection dashboard, but it is nearly idle. Paging here wastes on-call time. Fix application-side pool sizing or reduce wait_timeout to evict idle connections faster. The symptom in SHOW PROCESSLIST is a sea of Sleep entries with Time values approaching wait_timeout.

Actual overload with moderate connections. A write-heavy OLTP workload or a metadata lock cascade causes Threads_running to spike to 60 on a 16-core instance while Threads_connected remains at 80. The server is in trouble, but an alert on Threads_connected / max_connections never fires because the ratio is only 53 percent. The load signal is Threads_running relative to CPU cores.

Connection exhaustion cascade. A buffer pool cliff or checkpoint stall causes queries to slow down. Connections that normally finish in milliseconds now hold their slots for seconds. Threads_running rises first, then Threads_connected follows as the application pool fills with waiting queries. Eventually both hit max_connections and new connections are refused. Threads_running is the leading indicator; Threads_connected is the lagging symptom.

Thread pool deployments. With the thread pool enabled, a high Threads_connected may be safely multiplexed onto a small number of worker threads. Threads_running may stay flat even as query latency increases because work is queuing inside the pool rather than consuming OS threads. Operators who migrate to the thread pool and keep legacy Threads_running thresholds may miss saturation signals.

Tradeoffs and common misuses

Paging on connection count alone. Threads_connected should drive a page only when the server is actively rejecting connections and the ratio exceeds 95 percent for a sustained period. Even then, the root cause is usually in Threads_running or slow queries. On managed platforms like AWS RDS, max_connections is capped by instance class and cannot be raised without resizing; approaching that hard limit is a legitimate capacity concern. On self-managed instances, prefer a ticket at 80 percent and a page only when rejections occur.

Using absolute thresholds. Neither metric should be alerted on as an absolute number. A micro instance with max_connections of 50 and a bare-metal server with max_connections of 5000 have completely different semantics at 100 connected threads. Express Threads_connected as a ratio to max_connections. Express Threads_running as a multiple of CPU core count from nproc or /proc/cpuinfo. On containers, nproc may reflect host cores or cgroup limits depending on namespace configuration; use the database host’s effective core count.

The 50-thread ceiling heuristic. Outside of a thread pool, MySQL’s default model struggles past roughly 50 concurrently running threads. This is an operational ceiling, not a rigid limit. It predates modern NUMA hardware and faster mutex implementations, but contention simply shifts from table open cache locks to transaction system and buffer pool hashes. If your baseline Threads_running approaches this value during normal peak, you are already in the danger zone.

Ignoring the gap. The difference between Threads_connected and Threads_running is a diagnostic signal. A widening gap with low running threads points to pool leaks. A collapsing gap where both rise together points to query pile-up. Monitor the gap as a derived ratio or visually on the same chart.

Signals to watch in production

SignalWhy it mattersWarning sign
Threads_running / CPU coresMeasures actual concurrent execution load against hardware parallelism.Sustained above 2x cores (plan), above 4x cores (ticket).
Threads_connected / max_connectionsMeasures connection slot occupancy and headroom before rejection.Above 0.80 sustained for 10 minutes (ticket); above 0.95 with active rejections (page).
Threads_running vs Threads_connected gapDiagnoses whether high connection count is idle or active.High connected with low running suggests pool leak or idle accumulation.
Connection_errors_max_connectionsConfirms that new connections are actually being refused.Any sustained nonzero rate combined with high connected ratio.
Questions rateConfirms whether throughput is collapsing despite high concurrency.Drop > 50 percent from baseline while Threads_connected remains stable.
Innodb_row_lock_current_waitsDistinguishes lock contention from CPU saturation when Threads_running is high.> 0 sustained with rising Threads_running and dropping Questions.

How Netdata helps

Correlating Threads_running, CPU utilization, and disk I/O latency on the same chart exposes whether high concurrency is CPU-bound or I/O-bound. Per-second resolution catches Threads_running spikes that minute-level aggregations smooth over, especially during checkpoint stalls or lock contention bursts. A composite line showing the connected-to-running ratio makes idle pool leaks obvious without mental math. Plotting Questions alongside Threads_running highlights queuing: throughput drops while active threads pile up.

The Netdata solution

MySQL monitoring with Netdata

Netdata monitors MySQL and MariaDB with per-second metrics and ML anomaly detection. Track connection usage, query throughput, slow queries, redo-log pressure, and replication lag alongside the host and storage signals that explain them.