The only agent that thinks for itself

Autonomous Monitoring with self-learning AI built-in, operating independently across your entire stack.

Unlimited Metrics & Logs
Machine learning & MCP
5% CPU, 150MB RAM
3GB disk, >1 year retention
800+ integrations, zero config
Dashboards, alerts out of the box
> Discover Netdata Agents

Centralized metrics streaming and storage

Aggregate metrics from multiple agents into centralized Parent nodes for unified monitoring across your infrastructure.

Stream from unlimited agents
Long-term data retention
High availability clustering
Data replication & backup
Scalable architecture
Enterprise-grade security
> Learn about Parents

Fully managed cloud platform

Access your monitoring data from anywhere with our SaaS platform. No infrastructure to manage, automatic updates, and global availability.

Zero infrastructure management
99.9% uptime SLA
Global data centers
Automatic updates & patches
Enterprise SSO & RBAC
SOC2 & ISO certified
> Explore Netdata Cloud

Deploy Netdata Cloud in your infrastructure

Run the full Netdata Cloud platform on-premises for complete data sovereignty and compliance with your security policies.

Complete data sovereignty
Air-gapped deployment
Custom compliance controls
Private network integration
Dedicated support team
Kubernetes & Docker support
> Learn about Cloud On-Premises

Powerful, intuitive monitoring interface

Modern, responsive UI built for real-time troubleshooting with customizable dashboards and advanced visualization capabilities.

Real-time chart updates
Customizable dashboards
Dark & light themes
Advanced filtering & search
Responsive on all devices
Collaboration features
> Explore Netdata UI

Monitor on the go

Native iOS and Android apps bring full monitoring capabilities to your mobile device with real-time alerts and notifications.

iOS & Android apps
Push notifications
Touch-optimized interface
Offline data access
Biometric authentication
Widget support
> Download apps

The future of infrastructure observability

See our strategic direction across AI-native observability, full-stack signals, operational intelligence, and enterprise platform maturity.

AI-native observability
Full-stack signal coverage
Operational intelligence
Enterprise platform maturity
Agent releases every 6 weeks
Cloud continuous delivery
> Explore Product Roadmap

Best energy efficiency

True real-time per-second

100% automated zero config

Centralized observability

Multi-year retention

High availability built-in

Zero maintenance

Always up-to-date

Enterprise security

Complete data control

Air-gap ready

Compliance certified

Millisecond responsiveness

Infinite zoom & pan

Works on any device

Native performance

Instant alerts

Monitor anywhere

AI-native observability

Continuous delivery

Open source foundation

80% Faster Incident Resolution

AI-powered troubleshooting from detection, to root cause and blast radius identification, to reporting.

True Real-Time and Simple, even at Scale

Linearly and infinitely scalable full-stack observability, that can be deployed even mid-crisis.

90% Cost Reduction, Full Fidelity

Instead of centralizing the data, Netdata distributes the code, eliminating pipelines and complexity.

See and Map Your Entire Network

Live topology, flow analytics, and SNMP device and trap monitoring — unified with your full-stack observability.

Control Without Surrender

SOC 2 Type 2 certified with every metric kept on your infrastructure.

Integrations

800+ collectors and notification channels, auto-discovered and ready out of the box.

800+ data collectors
Auto-discovery & zero config
Cloud, infra, app protocols
Notifications out of the box
> Explore integrations
Real Results
46% Cost Reduction

Reduced monitoring costs by 46% while cutting staff overhead by 67%.

— Leonardo Antunez, Codyas

Zero Pipeline

No data shipping. No central storage costs. Query at the edge.

From Our Users
"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

No Query Language

Point-and-click troubleshooting. No PromQL, no LogQL, no learning curve.

Enterprise Ready
67% Less Staff, 46% Cost Cut

Enterprise efficiency without enterprise complexity—real ROI from day one.

— Leonardo Antunez, Codyas

SOC 2 Type 2 Certified

Zero data egress. Only metadata reaches the cloud. Your metrics stay on your infrastructure.

Full Coverage
800+ Collectors

Auto-discovered and configured. No manual setup required.

Any Notification Channel

Slack, PagerDuty, Teams, email, webhooks—all built-in.

Built for the People Who Get Paged

Because 3am alerts deserve instant answers, not hour-long hunts.

Every Industry Has Rules. We Master Them.

See how healthcare, finance, and government teams cut monitoring costs 90% while staying audit-ready.

Monitor Any Technology. Configure Nothing.

Install the agent. It already knows your stack.
From Our Users
"A Rare Unicorn"

Netdata gives more than you invest in it. A rare unicorn that obeys the Pareto rule.

— Eduard Porquet Mateu, TMB Barcelona

99% Downtime Reduction

Reduced website downtime by 99% and cloud bill by 30% using Netdata alerts.

— Falkland Islands Government

Real Savings
30% Cloud Cost Reduction

Optimized resource allocation based on Netdata alerts cut cloud spending by 30%.

— Falkland Islands Government

46% Cost Cut

Reduced monitoring staff by 67% while cutting operational costs by 46%.

— Codyas

Real Coverage
"Plugin for Everything"

Netdata has agent capacity or a plugin for everything, including Windows and Kubernetes.

— Eduard Porquet Mateu, TMB Barcelona

"Out-of-the-Box"

So many out-of-the-box features! I mostly don't have to develop anything.

— Simon Beginn, LANCOM Systems

Real Speed
Troubleshooting in 30 Seconds

From 2-3 minutes to 30 seconds—instant visibility into any node issue.

— Matthew Artist, Nodecraft

20% Downtime Reduction

20% less downtime and 40% budget optimization from out-of-the-box monitoring.

— Simon Beginn, LANCOM Systems

Pay per Node. Unlimited Everything Else.

One price per node. Unlimited metrics, logs, users, and retention. No per-GB surprises.

Free tier—forever
No metric limits or caps
Retention you control
Cancel anytime
> See pricing plans

What's Your Monitoring Really Costing You?

Most teams overpay by 40-60%. Let's find out why.

Expose hidden metric charges
Calculate tool consolidation
Customers report 30-67% savings
Results in under 60 seconds
> See what you're really paying

Your Infrastructure Is Unique. Let's Talk.

Because monitoring 10 nodes is different from monitoring 10,000.

On-prem & air-gapped deployment
Volume pricing & agreements
Architecture review for your scale
Compliance & security support
> Start a conversation

Monitoring That Sells Itself

Deploy in minutes. Impress clients in hours. Earn recurring revenue for years.

30-second live demos close deals
Zero config = zero support burden
Competitive margins & deal protection
Response in 48 hours
> Apply to partner

Per-Second Metrics at Homelab Prices

Same engine, same dashboards, same ML. Just priced for tinkerers.

Community: Free forever · 5 nodes · non-commercial
Homelab: $90/yr · unlimited nodes · fair usage
> Get the Homelab Plan

$1,000 Per Referral. Unlimited Referrals.

Your colleagues get 10% off. You get 10% commission. Everyone wins.

10% of subscriptions, up to $1,000 each
Track earnings inside Netdata Cloud
PayPal/Venmo payouts in 3-4 weeks
No caps, no complexity
> Get your referral link
Cost Proof
40% Budget Optimization

"Netdata's significant positive impact" — LANCOM Systems

Calculate Your Savings

Compare vs Datadog, Grafana, Dynatrace

Savings Proof
46% Cost Reduction

"Cut costs by 46%, staff by 67%" — Codyas

30% Cloud Bill Savings

"Reduced cloud bill by 30%" — Falkland Islands Gov

Enterprise Proof
"Better Than Combined Alternatives"

"Better observability with Netdata than combining other tools." — TMB Barcelona

Real Engineers, <24h Response

DPA, SLAs, on-prem, volume pricing

Why Partners Win
Demo Live Infrastructure

One command, 30 seconds, real data—no sandbox needed

Zero Tickets, High Margins

Auto-config + per-node pricing = predictable profit

Homelab Ready
Free Video Course

8-episode Netdata tutorial by LearnLinux.tv

76k+ GitHub Stars

3rd most starred monitoring project

Worth Recommending
Product That Delivers

Customers report 40-67% cost cuts, 99% downtime reduction

Zero Risk to Your Rep

Free tier lets them try before they buy

AI Support Assistant, Available 24/7

Nedi has access to all official documentation, source code, and resources. Ask any question about Netdata—responds in your language.

Deployment & configuration
Troubleshooting & sizing
Alerts & notifications
Evidence-based answers
> Ask Nedi now

Never Fight Fires Alone

Docs, community, and expert help—pick your path to resolution.

Learn.netdata.cloud docs
Discord, Forums, GitHub
Premium support available
> Get answers now

60 Seconds to First Dashboard

One command to install. Zero config. 850+ integrations documented.

Linux, Windows, K8s, Docker
Auto-discovers your stack
> Read our documentation

76,000+ Engineers Strong

615+ contributors. 1.5M daily downloads. One mission: simplify observability.

Per-Second. 90% Cheaper. Data Stays Home.

Side-by-side comparisons: costs, real-time granularity, and data sovereignty for every major tool.

See why teams switch from Datadog, Prometheus, Grafana, and more.

> Browse all comparisons
Edge-Native Observability, Born Open Source
Per-second visibility, ML on every metric, and data that never leaves your infrastructure.
Founded in 2016
615+ contributors worldwide
Remote-first, engineering-driven
Open source first
> Read our story
Promises We Publish—and Prove
12 principles backed by open code, independent validation, and measurable outcomes.
Open source, peer-reviewed
Zero config, instant value
Data sovereignty by design
Aligned pricing, no surprises
> See all 12 principles
Edge-Native, AI-Ready, 100% Open
76k+ stars. Full ML, AI, and automation—GPLv3+, not premium add-ons.
76,000+ GitHub stars
GPLv3+ licensed forever
ML on every metric, included
Zero vendor lock-in
> Explore our open source
Build Real-Time Observability for the World
Remote-first team shipping per-second monitoring with ML on every metric.
Remote-first, fully distributed
Open source (76k+ stars)
Challenging technical problems
Your code on millions of systems
> See open roles
Meet the Team Behind Netdata
Conferences, meetups, and tradeshows where you can see Netdata in action and talk to the engineers who build it.
Live demos and deep dives
Book 1-on-1 meetings
Talks and panel sessions
Event recaps and photos
> See all events
Talk to a Netdata Human in <24 Hours
Sales, partnerships, press, or professional services—real engineers, fast answers.
Discuss your observability needs
Pricing and volume discounts
Partnership opportunities
Media and press inquiries
> Book a conversation
Your Data. Your Rules.
On-prem data, cloud control plane, transparent terms.
Trust & Scale
76,000+ GitHub Stars

One of the most popular open-source monitoring projects

SOC 2 Type 2 Certified

Enterprise-grade security and compliance

Data Sovereignty

Your metrics stay on your infrastructure

Validated
University of Amsterdam

"Most energy-efficient monitoring solution" — ICSOC 2023, peer-reviewed

ADASTEC (Autonomous Driving)

"Doesn't miss alerts—mission-critical trust for safety software"

Community Stats
615+ Contributors

Global community improving monitoring for everyone

1.5M+ Downloads/Day

Trusted by teams worldwide

GPLv3+ Licensed

Free forever, fully open source agent

Why Join?
Remote-First

Work from anywhere, async-friendly culture

Impact at Scale

Your work helps millions of systems

$ guides / vmware-vsphere / vmware-vsphere-vcpu-oversizing

Operations Guides

vSphere vCPU oversizing: why adding vCPUs made the VM slower

You gave the database VM 16 vCPUs because it was slow at 8. Now it is slower. Host CPU sits at 65%. Guest OS reports 20% utilization. Nothing in the usual dashboards explains the degradation.

This is the vCPU oversizing spiral. Adding vCPUs to a VM that does not need them does not add capacity. It adds scheduling overhead. The ESXi CPU scheduler uses relaxed co-scheduling for multi-vCPU VMs, which means it must find enough simultaneously available physical CPUs to co-schedule a VM’s vCPUs together. The more vCPUs you give a VM, the harder that search becomes, and the longer each vCPU spends in the READY state before it can execute.

The guest OS cannot see this wait. From inside the VM, processes run more slowly, but CPU utilization looks low because the OS does not know its vCPUs are being descheduled. The instinctive fix, adding even more vCPUs, makes the problem worse.

What this means

For a single-vCPU VM, the scheduler only needs one free pCPU at a time. For an 8-vCPU or 16-vCPU VM, the scheduler must find that many pCPUs with available capacity at the same moment, or close enough to satisfy the relaxed co-scheduling invariant. On a moderately loaded host, this is not always possible. The vCPUs pile up in the READY queue.

Two metrics capture this penalty:

  • CPU ready time (%RDY): the percentage of time a vCPU was runnable (had work to do) but was waiting for a pCPU. For an oversized VM, ready time climbs because the scheduler struggles to assemble enough free pCPUs at once.
  • CPU co-stop (%CSTP): the time a vCPU in a multi-vCPU VM is halted because the scheduler is waiting for sibling vCPUs to be co-scheduled. The scheduler holds back fast vCPUs so slow ones can catch up, maintaining co-scheduling progress. High co-stop is the definitive signal that a VM has more vCPUs than the scheduler can efficiently handle.

Modern ESXi uses relaxed co-scheduling, which significantly reduces co-stop compared to older strict co-scheduling. If you see sustained co-stop above 1% on a modern host, the oversizing is severe.

flowchart TD
    A[VM perceived as slow] --> B[Admin adds more vCPUs]
    B --> C[Scheduler must find N free pCPUs at once]
    C --> D[%RDY rises: vCPUs wait to run]
    D --> E[%CSTP rises: fast vCPUs held for slow ones]
    E --> F[VM performs worse than before]
    F --> A

The spiral works like this: the admin sees a slow VM, checks guest CPU (looks low), assumes the VM needs more compute, and adds vCPUs. The scheduler now has an even harder co-scheduling problem. Ready time and co-stop rise further. The VM gets slower. The admin adds more vCPUs.

A telling characteristic: the host CPU is not maxed out. It sits at 60-80%, sometimes lower. The host has capacity, but it is fragmented across pCPUs in a way the scheduler cannot reassemble for the oversized VM. Smaller VMs on the same host perform fine because they only need one or two pCPUs at a time.

Common causes

CauseWhat it looks likeFirst thing to check
Oversized VM (more vCPUs than workload uses)High %RDY and %CSTP on specific wide VMs while host CPU is moderate (60-80%); smaller VMs unaffectedIn-guest CPU utilization versus vCPU count
Template defaults with large vCPU countsMultiple VMs from the same template show the same scheduling penaltyCheck the template’s vCPU configuration
NUMA node spanningVM vCPU count exceeds cores per NUMA node; memory locality below 80%NUMA locality percentage (N%L) in esxtop
CPU Hot Add enabled on pre-8.0 VMsWide VM with Hot Add shows NUMA degradation because vNUMA is disabledCheck Hot Add setting and hardware version
Forgotten CPU limitsVM shows high %MLMTD instead of, or alongside, high %RDY%MLMTD column in esxtop

Quick checks

Run these read-only checks on the host running the affected VM. They do not modify any state.

# Launch esxtop and check CPU scheduling metrics
esxtop
# Press 'c' for CPU view, examine per VM world:
#   %RDY   - ready time (vCPU runnable but waiting for pCPU)
#   %CSTP  - co-stop (vCPU held waiting for sibling co-scheduling)
#   %MLMTD - max-limited (throttled by a configured CPU limit)
# Check host pCPU utilization in the PCPU section at the top: %USED
# Press 'm' for memory view, press 'f' to enable NUMA stats fields
# Look at N%L column per VM (local memory access percentage)
# List vCPU counts and CPU usage for all VMs
Get-VM | Select Name, NumCPU, @{N='CpuUsageMhz';E={$_.ExtensionData.Summary.QuickStats.OverallCpuUsage}} | Sort-Object NumCPU -Descending

# Check per-VM ready time (realtime, last 6 samples of 20s each)
Get-Stat -Entity (Get-VM "myvm") -Stat cpu.ready.summation -Realtime -MaxSamples 6
# Convert to percentage: value_ms / (20000 * vCPU_count) * 100 = %RDY

How to diagnose it

  1. Confirm the host is not simply out of CPU. Check host %USED in esxtop. If the host is above 90%, you have genuine overcommitment, not oversizing. The oversizing pattern shows up when the host is at 60-80% and specific VMs still have high ready time.

  2. Identify which VMs have high %RDY. In esxtop CPU view, sort by %RDY. Look for wide VMs (4 or more vCPUs) with sustained ready time above 5%. Note whether smaller VMs on the same host have low ready time. If they do, the host has capacity but cannot schedule the wide VMs efficiently.

  3. Check %CSTP on the affected VMs. Co-stop above 1% sustained is worth investigating. Above 3% sustained is a strong indicator of oversizing. On modern ESXi with relaxed co-scheduling, any sustained co-stop means the problem is real, not noise.

  4. Check in-guest CPU utilization. This is the critical data point. If a 16-vCPU VM is using 20% of its guest CPU, it only needs roughly 3-4 vCPUs of actual compute. The remaining vCPUs exist only to make the scheduler’s job harder. Use in-guest monitoring (top, Task Manager, /proc/stat) or the vCenter-reported guest CPU usage.

  5. Rule out CPU limits. Check %MLMTD in esxtop. A limit-constrained VM may show low %RDY but high %MLMTD. If %MLMTD is non-zero, the fix is removing the limit, not changing vCPU count. Limits are often inherited from templates or resource pools and are invisible to the guest.

  6. Check NUMA alignment. Compare the VM’s vCPU count to the host’s cores per NUMA node. A VM with 16 vCPUs on a host with 10 cores per socket spans two NUMA nodes by definition. Check N%L in esxtop memory view. Locality below 80% means memory accesses are crossing the interconnect, adding latency to every memory operation.

Metrics and signals to monitor

SignalWhy it mattersWarning sign
%RDY (cpu.ready.summation)Measures time vCPUs wait for pCPUs; the primary scheduling contention signalAbove 5% sustained on specific VMs while host CPU is moderate
%CSTP (cpu.costop.summation)Measures co-scheduling wait; the definitive oversizing indicator for multi-vCPU VMsAbove 1% sustained; above 3% is significant oversizing
%MLMTD (cpu.maxlimited.summation)Distinguishes limit throttling from genuine scheduling contentionAny sustained non-zero value where performance is reported slow
Host CPU utilization (%USED)Context for interpreting ready time; moderate host CPU plus high VM ready equals oversizing60-80% with specific wide VMs starved
NUMA locality (N%L)Remote memory access penalty for wide VMs spanning NUMA nodesBelow 80% for latency-sensitive workloads
In-guest CPU utilizationThe sizing data point: how much compute the workload actually usesGuest CPU consistently below 30% on a wide VM

Fixes

Right-size the VM

The primary fix. Reduce the vCPU count to match actual workload demand. A 16-vCPU VM using 20% guest CPU needs approximately 3-4 vCPUs. After the reduction, the scheduler has a smaller co-scheduling problem and ready time should drop.

Reducing vCPU count requires a VM power cycle. Schedule a maintenance window. After the change, monitor %RDY and %CSTP for several hours under normal load to confirm improvement.

If the application has periodic spikes that justify a wider configuration, consider whether CPU shares would be a better tool than raw vCPU count. Shares let the VM claim more pCPU time during contention without the co-scheduling penalty of carrying unused vCPUs.

Fix NUMA alignment

If the VM’s vCPU count exceeds the host’s cores per NUMA node, it spans nodes by definition. Two options:

  • Reduce vCPU count below the cores-per-NUMA-node threshold so the VM fits within a single NUMA node.
  • Accept the spanning penalty knowingly. If the workload genuinely needs the vCPUs, verify that the vNUMA topology presented to the guest matches the physical NUMA layout. On vSphere 6.5 and later, changing cores-per-socket does not change vNUMA presentation. ESXi auto-selects the optimal vNUMA topology.

Also check whether CPU Hot Add is enabled. On vSphere versions before 8.0, enabling CPU Hot Add disables vNUMA entirely, which degrades wide VMs that depend on NUMA locality. On vSphere 8.0 with hardware version 20 or later, Hot Add preserves vNUMA. If you are on an older version and running a wide VM, disable Hot Add unless you genuinely need it.

Remove forgotten CPU limits

If %MLMTD is non-zero, find and remove the CPU limit. Check the VM’s resource allocation, any parent resource pool, and the template the VM was cloned from. The default for “unlimited” is -1 in the API, not 0. A limit-constrained VM looks identical to CPU contention from inside the guest but is actually artificial throttling.

Consolidate snapshots

If co-stop is elevated and the VM has old or deep snapshots, consolidating them can reduce or eliminate the co-stop penalty. Plan for a maintenance window because consolidation stuns the VM briefly and is I/O intensive.

Prevention

  • Right-size against in-guest utilization, not peak provisioning assumptions. A VM that never uses more than 4 vCPUs of actual compute should not carry 16.
  • Monitor %CSTP alongside %RDY for every multi-vCPU VM. Co-stop is the early warning signal for oversizing, and many teams that already monitor ready time miss it entirely.
  • Audit VM templates for vCPU count. Templates with 8 or 16 vCPUs propagate the oversizing problem to every cloned VM. Set template defaults to a moderate count and increase per-VM only when justified by utilization data.
  • Gate vCPU increases on ready-time data. Before adding vCPUs to a slow VM, check %RDY. If ready time is already elevated, adding vCPUs will make it worse. If ready time is near zero and the guest is genuinely CPU-bound, more vCPUs may help.
  • Keep wide VMs NUMA-aware. Match vCPU count to the smallest host in the cluster’s cores-per-NUMA-node, or accept the spanning penalty deliberately.

How Netdata helps

  • Per-second granularity on %RDY and %CSTP catches scheduling spikes that disappear in vCenter’s 5-minute rolled-up averages. A VM that hits 40% ready for 30 seconds every few minutes shows as approximately 5% in a 5-minute average but is visibly degraded at per-second resolution.
  • Correlating host CPU utilization with per-VM ready and co-stop in a single view distinguishes genuine overcommitment (host at 90%, all VMs have high ready) from oversizing (host at 65%, specific wide VMs have high ready while small VMs do not).
  • ML anomaly detection on scheduling metrics surfaces gradual co-stop creep as a VM’s workload shifts over time, even before it crosses a static threshold.
  • Tracking in-guest CPU utilization alongside hypervisor-level ready time makes the right-sizing decision data-driven. If guest CPU is low and ready time is high, the VM is oversized, not underpowered.
  • Alerting on %MLMTD alongside %RDY prevents the common blind spot where a CPU-limited VM looks healthy on ready time alone.
The Netdata solution

VMware vSphere monitoring with Netdata

Netdata auto-discovers vCenter, ESXi hosts, VMs, and datastores through the vSphere API and collects them per second with ML-powered anomaly detection. Correlate CPU ready and co-stop, ballooning and host swap, datastore latency, and snapshot growth against the host and guest signals behind them, so you catch the incidents in these runbooks before they page anyone.