Features
One platform for monitoring, logs, and topology. Everything below is included; nothing needs a separate agent on your devices.
Discovery & inventory
Find what's on the network and keep an accurate, organized inventory.
Host & service discovery
Sweep your networks for live hosts and fingerprint the TCP/UDP services each one exposes.
Tunable scan profiles
Light-touch to thorough scanning, with optional port scanning, per your environment.
Device classes
Group devices by type; classes carry credentials and monitoring, inherited automatically.
Live inventory
Every device with up/down status, organized by class and site, promoted from discovery in one step.
Monitoring & metrics
Agent-less collection of the signals that matter, with the math done server-side.
Agent-less collection
One lightweight collector speaks SNMP, SSH, ICMP, syslog, and SNMP traps; no per-device agents.
Monitoring packs
Reusable packs define what to poll. Ship-with Core plus downloadable vendor bundles (Cisco, Juniper, FortiGate, and more).
Interface metrics
Per-interface traffic, packets, and errors, with per-second rates computed for you.
Interface thresholds
Per-interface limits on traffic, errors, or utilization that open an event on breach and clear on recovery.
Service monitoring
Synthetic checks for TCP/HTTP services with up/down events.
Custom dashboards & reports
Build the views you want; export reports on inventory, health, and utilization.
Topology & correlation
See how everything connects, and what each failure takes down with it.
Live topology graph
A graph model of your network, built from the devices and links GridNMS discovers.
Neighbor discovery
Automatic links from LLDP and CDP neighbor data.
Blast radius
When a device fails, see the upstream root cause and every affected downstream device.
Layouts & filters
Filter the graph by class, layer, site, and status; multiple layouts.
Detection & logs
One detection language across your logs and your telemetry, plus full log search.
YARA-L detections
Write detections once and run them on logs and metrics alike, scheduled for coverage or streaming at ingest.
Field extraction
Turn raw log lines into structured, searchable fields.
Log search
Fast search over collected syslog and trap history, on the device tab or across the fleet.
Built-in rules
Sensible detections out of the box; fully editable for your environment.
Retention & cold tier
Per-tenant retention by age or size, with older logs tiered to cheaper cold storage.
Events, cases & alerting
Turn signal into prioritized events, group the noise, and alert once.
Event lifecycle
Open, acknowledge, and close events with severity, deduplication, and close-on-recovery.
Automatic case management
Case rules correlate related and flapping events into a single case over a window you define.
Flap suppression
A value sitting on a threshold won't double-fire; cases close on their own once quiet.
Flexible alerting
Route the events you care about to email, Slack, webhooks, or PagerDuty.
RCA workbench
Investigate a case with its grouped events and the affected topology in one place.
Platform & deployment
Multi-tenant, multi-site, and yours to run in our cloud or your own.
Sites & RBAC
Organize devices by site with role-based access down to the site level.
Collectors
Outbound-only collectors assigned to networks, with health monitoring and self-upgrade.
MIB browser & pack bundles
Upload vendor MIBs and pack bundles; OIDs and tabs appear automatically.
Cloud or self-hosted
Run GridNMS managed in our cloud, or self-host the same platform with Docker.
Put it to work on your network.
From $49/month. Cloud-hosted, or self-hosted with Docker.