---
title: InfluxDB system buckets
description: InfluxDB system buckets contain time series data used by and generated from the InfluxDB monitoring and alerting system and the task engine.
url: https://docs.influxdata.com/influxdb/v2/reference/internals/system-buckets/
estimated_tokens: 1050
product: InfluxDB OSS v2
version: v2
publisher: InfluxData
canonical: https://docs.influxdata.com/influxdb/v2/reference/internals/system-buckets/
date: '2025-04-02T15:54:32-06:00'
lastmod: '2025-04-02T15:54:32-06:00'
---

This page documents an earlier version of InfluxDB OSS.[InfluxDB 3 Core](/influxdb3/core/) is the latest stable version.

#### API token hashing is enabled by default in InfluxDB OSS 2.9.0

Stronger token security: tokens are stored as hashes on disk, so a
copy of the database file doesn’t expose usable tokens. Existing
tokens are hashed on first startup and the original strings can’t
be recovered afterward — **capture any plaintext tokens you still
need before you upgrade**.

For more information, see [Token hashing](/influxdb/v2/admin/tokens/#token-hashing).

InfluxDB system buckets contain time series data used by and generated from the
InfluxDB monitoring and alerting system and the task engine.

Each InfluxDB organization includes the following system buckets:

* [\_monitoring](#_monitoring-system-bucket)
* [\_tasks](#_tasks-system-bucket)

> [!Note]
> The system bucket schemas below reference **InfluxDB data elements**.
> For more information, see [InfluxDB key concepts](/influxdb/v2/reference/key-concepts/data-elements/).

## \_monitoring system bucket

The `_monitoring` system bucket stores InfluxDB data used to[monitor data and send alerts](/influxdb/v2/monitor-alert/).

**Data retention:** 7 days

### \_monitoring bucket schema

* **statuses** *(measurement)*
  * **tags:**
    * **\_check\_id:** check ID
    * **\_check\_name:** check name
    * **\_level:** level evaluated by the check (ok, info, warn, or crit)
    * **\_source\_measurement:** original measurement queried by the check
    * **\_type:** check type (threshold or deadman)
    * *other tags inherited from queried data or added in the check configuration*

  * **fields:**
    * **\_message:** message generated by the check
    * **\_source\_timestamp:** original timestamp of the queried data
    * *other fields inherited from queried data*

* **notifications** *(measurement)*
  * **tags:**
    * **\_check\_id:** check ID that triggered the notification
    * **\_check\_name:** check name that triggered the notification
    * **\_level:** check-evaluated level that triggered the notification (ok, info, warn, or crit)
    * **\_notification\_endpoint\_id:** notification endpoint ID
    * **\_notification\_endpoint\_name:** notification endpoint name
    * **\_notification\_rule\_id:** notification rule ID
    * **\_notification\_rule\_name:** notification rule name
    * **\_sent:** sent status (true or false)
    * **\_source\_measurement:** original measurement queried by the check
    * **\_type:** check type (threshold or deadman)
    * *other tags inherited from queried data or added in the check configuration*

  * **fields:**
    * **\_message:** message generated by the check
    * **\_source\_timestamp:** original timestamp of the queried data
    * **\_status\_timestamp:** timestamp when the status (`_level`) was evaluated
    * *other fields inherited from queried data*

*

## \_tasks system bucket

The `_tasks` system bucket stores data related to [InfluxDB task](/influxdb/v2/process-data/) executions.

**Data retention:** 3 days

### \_tasks bucket schema

*A **task run** refers to a single task execution.*

* **runs** *(measurement)*
  * **tags:**
    * **status:** task run status (success or failed)
    * **taskID:** task ID

  * **fields:**
    * **finishedAt:** timestamp when the task run finished
    * **logs:** log output from the task run
    * **requestedAt:** timestamp when the task run was requested
    * **runID** task run ID
    * **scheduledFor:** timestamp the task run was scheduled for
    * **startedAt:** timestamp when the task run started

#### Related

* [Monitor data and send alerts](/influxdb/v2/monitor-alert/)
* [Process data with InfluxDB tasks](/influxdb/v2/process-data/)
* [monitor.check() function](/flux/v0/stdlib/influxdata/influxdb/monitor/check/)
* [monitor.deadman() function](/flux/v0/stdlib/influxdata/influxdb/monitor/deadman/)
* [monitor.from() function](/flux/v0/stdlib/influxdata/influxdb/monitor/from/)
* [monitor.logs() function](/flux/v0/stdlib/influxdata/influxdb/monitor/logs/)
* [monitor.notify() function](/flux/v0/stdlib/influxdata/influxdb/monitor/notify/)

[buckets](/influxdb/v2/tags/buckets/)