traildb / traildb-crystal

Crystal bindings for TrailDB

TrailDB

TrailDB is an efficient tool for storing and querying series of events. This repository contains the core C library and the tdb command line tool.

Learn more at traildb.io.

Quick start

For detailed installation instructions, see Getting Started guide.

Installing binaries

On OSX, TrailDB is available through homebrew:

$ brew install traildb

Linux binaries are not available yet.

Compiling and installing from source

Install Dependencies

$ apt-get install libarchive-dev libjudy-dev pkg-config

For RPM-based distros:

$ yum install judy-devel libarchive-devel pkg-config

For OSX:

$ brew install traildb/judy/judy libarchive pkg-config

For FreeBSD:

$ sudo pkg install python libarchive Judy pkgconf gcc

Note that your systems package manager may have too old of libjudy. You may also require a patch if you are using gcc 4.9.

Build TrailDB

$ ./waf configure
$ ./waf install

Alternatively you may use autotools

$ ./autogen.sh
$ ./configure
$ make
$ make install

Run Tests

$ ./waf test

traildb-crystal's Issues

Macro to enhance Event Filter logic

Instead of specifying event filters like this:

event_filter = traildb.create_filter([[{"field1", "a"}, {"field2", "4"}]])

How about we use macros to specify filters using equality/negative equality directly, like:

event_filter = traildb.create_filter("field1" == "a" && "field2" == "4")

This could greatly simplify readability of negation case, and conjuctions:

("field1" == "a" && "field2" != "4") || !("field2" == "3")

It would have to error out before two levels of nesting, as TrailDB supports only one level of conjunctions.

Add option to disable parsing of timestamps into Time objects

Return an object wrapper for TrailDBEvent, instead of producing a Hash

Not all values need to be parsed and returned immediately. Returning a wrapper object allows event items to be parsed lazily.

Work in --release mode

TrailDB bindings do not currently work in release mode. It appears pointer address are incorrect coming from the C library.