The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / vmware-vsphere / vmware-vsphere-drs-thrashing

Operations Guides

vSphere DRS thrashing: vMotion churn with no stable placement

DRS thrashing is when the Distributed Resource Scheduler cannot find stable placement and keeps migrating the same VMs between hosts. Each migration costs vMotion bandwidth and inflicts a brief stun on the VM. The cluster looks balanced on paper, but the migrations never stop.

This is almost always the DRS cost-benefit model oscillating because something underneath is unstable: bursty CPU or memory pressure, an aggressive migration threshold, conflicting affinity rules, or capacity too tight to ever be balanced.

DRS evaluates placement periodically, runs a cost-benefit analysis, and recommends vMotion when the projected benefit exceeds the projected cost. When conditions flip every cycle, DRS moves the VM back. Migration rate climbs, the vMotion network saturates, and large or memory-dirty VMs accumulate stun time. The symptom is “DRS keeps moving the same VMs,” and the fix is rarely to make DRS more aggressive.

What this means

DRS is not real-time. By default it evaluates placement every five minutes on vSphere 6.x. vSphere 7.0 rewrote the algorithm and runs load balancing every one minute.

Each cycle, DRS asks: would moving VM X from host A to host B reduce cluster imbalance enough to justify the vMotion cost? When the answer oscillates, you get thrashing.

The memory side is also version-dependent. vSphere 7.0+ uses Granted Memory (host physical memory mapped to the VM) to compute host memory utilization, replacing Active Memory. The explicit goal was to reduce vMotions triggered by Active Memory fluctuations. There is no option to revert. If you are still on 6.x, Active Memory fluctuations are a more likely thrashing trigger.

The migration threshold slider has five positions. Level 3 is the default. Level 5 (Aggressive) tells DRS to recommend vMotions for even slight imbalance; Level 1 (Conservative) only recommends mandatory priority-1 moves. A cluster at Level 5 with bursty workloads is the textbook recipe for churn.

flowchart TD
  A[Workload oscillates per cycle] --> B[DRS cost-benefit flips]
  B --> C[Same VM migrated back and forth]
  C --> D[vMotion bandwidth consumed]
  C --> E[VM stun per migration]
  D --> F[Other vMotion-dependent ops slow]
  E --> G[Per-VM stun accumulates]
  F --> H[Cluster appears unbalanced despite moves]
  G --> H
  H --> A

The loop feeds itself. The cluster never converges because the signal DRS reacts to keeps changing every evaluation cycle.

Common causes

CauseWhat it looks likeFirst thing to check
Aggressive threshold plus bursty workloadMany DRS-initiated vMotions every hour, mostly small VMs, host utilization fluctuating within a narrow bandDRS migration threshold level
Capacity too tight for N+1Even after migrations, hosts stay near 90% CPU or memory; DRS has nowhere productive to send VMsPer-host CPU and consumed memory headroom
Active Memory fluctuations (vSphere 6.x)Migrations correlate with memory-active spikes that resolve on their ownvSphere version and host active vs consumed memory
Affinity and anti-affinity rule conflictsDRS recommendations blocked or forced into a narrow placement; balance score stays high despite migrationsDRS rules and ruleset faults
Memory-dirty workloadsEach migration stuns for seconds, pre-copy convergence is slow, vMotion takes much longer than baselinevMotion duration and stun time per VM
vCLS VMs unhealthy (vSphere 7+)“DRS functionality was impacted” alarm, migrations stall or stop entirelyvCLS VM health in cluster view

Quick checks

These are safe read-only checks.

# PowerCLI: count DRS-initiated migrations in the last hour
Get-VIEvent -Entity (Get-Cluster <cluster>) -Types "DrsVmMigratedEvent" -Start (Get-Date).AddHours(-1) | Measure-Object
# PowerCLI: DRS configuration
Get-Cluster <cluster> | Select Name, DrsEnabled, DrsAutomationLevel
# PowerCLI: failed migrations (infrastructure issues masquerading as thrashing)
Get-VIEvent -Types "VmFailedMigrateEvent" -Start (Get-Date).AddHours(-24)
# PowerCLI: pending DRS recommendations
Get-DrsRecommendation -Cluster <cluster>
# PowerCLI: rule violations and DRS faults
Get-VIEvent -Entity (Get-Cluster <cluster>) -Start (Get-Date).AddHours(-1) | Where-Object {$_.EventTypeId -match "Drs|compliance|rule"}
# esxtop: vMotion vmknic bandwidth utilization (press 'n' for network view)
esxtop

How to diagnose it

  1. Quantify the churn. Pull DrsVmMigratedEvent count per hour for the last 24 to 48 hours. Thresholds worth investigating: more than about 10 migrations per hour in a stable cluster, or migration rate greater than 2x the 7-day average. Cyclical patterns where the same VMs migrate back and forth across cycles are the clearest thrashing signal.

  2. Identify the recurring VMs. Group migration events by VM. A handful of VMs accounting for most migrations is the strongest thrashing signature. Record their vCPU count, configured memory, and workload type (database, batch, VDI, build agent).

  3. Compare host utilization across the cluster. If every host sits above 85% CPU or consumed memory, there is no balanced placement possible, and DRS will keep trying. If hosts oscillate between, say, 60% and 90% within a single DRS evaluation window, the workload is too bursty for the current threshold.

  4. Check the DRS migration threshold. Anything above Level 3 in a volatile environment is suspect. Note that PowerCLI displays the threshold value inverted relative to the vSphere UI slider: in the API a lower number means more aggressive. Do not change it yet.

  5. Check affinity and anti-affinity rules. DRS rules constrain placement. Conflicting or overly strict rules can prevent DRS from ever reaching a low imbalance score. This looks identical to thrashing from the migration rate alone.

  6. Check vMotion network bandwidth. Use esxtop network view on the vmknic tagged for vMotion. Sustained near link capacity during steady-state operation (not during maintenance mode) means thrashing is starving legitimate migrations.

  7. Check vCLS VM health on vSphere 7+. DRS depends on vSphere Cluster Services. Unhealthy vCLS VMs raise the “vSphere DRS functionality was impacted due to unhealthy state vSphere Cluster Services” alarm and degrade or block migrations.

  8. Check per-migration stun time. Large or memory-dirty VMs stun longer per move. Per-VM stun accumulation across a day is usually the real user-visible cost, even when the raw migration rate looks only mildly high.

Metrics and signals to monitor

SignalWhy it mattersWarning sign
DRS migration rate (DrsVmMigratedEvent count per hour)Direct measure of churnMore than 10/hr in a stable cluster, or more than 2x the 7-day average
Per-VM migration count (24h rolling)Identifies the oscillating workloadsSame VM migrating more than 3-4 times per day outside maintenance
vMotion failure rate (VmFailedMigrateEvent)Rules out infrastructure masquerading as thrashingAny sustained nonzero
Per-VM stun time per vMotionThe real user-visible costMore than 5 seconds on production VMs
Host CPU utilization disparityWhether balance is even achievableSustained more than 85% on multiple hosts simultaneously
Host consumed vs active memoryMemory-driven DRS triggersActive-to-consumed ratio unstable, or consumed more than 85% of physical
vMotion vmknic bandwidthWhether churn is saturating the migration networkSustained more than 70% during non-maintenance operation
DRS balance scoreWhether migrations are actually improving placementStays high despite active migrations
vCLS VM health (vSphere 7+)DRS prerequisiteAny vCLS VM unhealthy

Fixes

Group fixes by the underlying cause. Apply the cheapest, safest one first.

Lower the migration threshold

For most bursty-workload thrashing, dropping the DRS migration threshold from Level 5 to Level 3, or from Level 3 to Level 2, is the single most effective change. DRS will recommend fewer migrations because the cost-benefit bar is higher.

This takes effect on the next DRS evaluation cycle and is non-disruptive. Watch the migration rate for the next hour.

Address capacity headroom

If hosts are uniformly above 85% CPU or memory, DRS has no good answer. Options:

  • Move some VMs to a different cluster.
  • Add a host, restoring N+1 headroom.
  • Right-size oversized VMs to free real capacity.
  • Add memory reservations on critical VMs to prevent memory-driven moves.

Right-sizing is the highest-leverage option but requires a VM power cycle.

Soften affinity rules

Review affinity and anti-affinity rules. “Must” rules are hard constraints. “Should” rules let DRS violate them when balance is poor. Converting “must” to “should” for non-critical rules gives DRS room to find a stable placement.

Pin specific thrashing VMs

If one or two VMs repeatedly migrate, consider VM-Host affinity to a specific host, or partial CPU and memory reservation, to take them out of the placement pool. This is a targeted fix, not a global one.

vGPU-aware DRS (vSphere 8.0 U2+)

If the thrashing involves vGPU-enabled VMs, vSphere 8.0 Update 2 added vGPU-aware DRS tuning that estimates vMotion stun time based on framebuffer size and network bandwidth. List the vGPU-aware DRS advanced options on your cluster (for example with PowerCLI Get-AdvancedOption) and confirm they are configured before assuming vGPU VMs are eligible for ordinary DRS moves.

Do not restart vCenter as a fix

Restarting vpxd drops all in-flight tasks, takes 5 to 15 minutes to rebuild the inventory cache, and after restart DRS triggers a burst of catch-up vMotions that makes thrashing worse for 1 to 2 hours.

Prevention

  • Right-size VMs before adding capacity. Oversized VMs are harder for DRS to schedule and more disruptive to migrate.
  • Track the 7-day migration baseline. Without a baseline you cannot tell normal cluster noise from thrashing.
  • Keep DRS at Level 3 unless you have a specific reason. Level 5 in a bursty environment is the most common thrashing pattern.
  • Reserve the vMotion network for vMotion. Sharing the migration network with VM or storage traffic produces both slow migrations and slow storage.
  • Treat vCLS VMs as infrastructure on vSphere 7+. DRS depends on them and so do you.
  • Watch per-VM stun accumulation, not just migration count. A few large-VM migrations can cost more than many small-VM migrations.
  • Check DRS rules during every major change. New affinity rules added for one workload can silently destabilize placement for unrelated workloads.

How Netdata helps

  • Per-second DRS migration rate and per-VM migration count, so you can see the oscillation pattern that 5-minute rollups hide.
  • vMotion stun time correlated with per-VM vCPU and memory size, which tells you whether churn is concentrated on a small number of large VMs.
  • Host CPU and consumed versus active memory per host side by side, so you can tell whether DRS even has a balanced placement to reach.
  • vMotion vmknic bandwidth utilization, so you can detect when thrashing is saturating the migration network and starving legitimate maintenance vMotions.
  • ML-based anomaly detection on the migration rate that flags the cost-benefit oscillation pattern even when no single metric crosses a hard threshold.
  • Correlation between DRS migration spikes and CPU ready or co-stop spikes on the migrating VMs, which distinguishes thrashing from healthy balancing.
The Netdata solution

VMware vSphere monitoring with Netdata

Netdata auto-discovers vCenter, ESXi hosts, VMs, and datastores through the vSphere API and collects them per second with ML-powered anomaly detection. Correlate CPU ready and co-stop, ballooning and host swap, datastore latency, and snapshot growth against the host and guest signals behind them, so you catch the incidents in these runbooks before they page anyone.