Repository navigation
v0.9.0
Trawl 0.9.0
Trawl collects and searches logs for homelabs and small installations. Run one
Linux server, send it events over HTTP or syslog, and search them from a browser,
the command line, or the terminal UI. Events are stored in Parquet. The CLI can
also query local Parquet files without a server.
This release brings the current development baseline to packaged installations
ahead of 1.0. It includes substantial changes since 0.4.0 and requires fresh
state when replacing an installation that uses the older database or storage
formats.
What is included
- A redesigned browser interface with a query console, field inspection,
responsive tables, a command palette, and a Search quick start. - Smaller browser downloads and faster startup, plus a theme setting that can
follow your system appearance. - Live search, saved queries, scheduled reports, and stored-run previews.
- Health checks and Prometheus rules for operational failures.
- Access control through Fleet API keys, roles, and browser sessions.
- Linux and macOS distributions with a bundled DuckDB runtime, and updated
installation and operation guides.
Existing installations
This release adopts the fresh-state baseline planned for Trawl 1.0. The older
database conversion chains have been removed. Changing only the image or binary
version is not a supported conversion of an older installation.
Keep the existing installation and its backups. Provision a fresh Trawl
application database, a fresh shared Fleet keystore, and a fresh owned data
directory for the new baseline. The Fleet keystore starts without keys, roles,
or grants. If Coastwatch shares that keystore, coordinate its cutover too.
Startup refuses incompatible state without converting or deleting it. Current
storage uses EPOCH = 3. An epoch marker alone does not establish database
compatibility. Normal forward migrations and crash recovery remain supported
for state created on the new baseline.
See the deployment guide and
backup and restore guide before
changing an existing installation.
Installation choices
| Platform | Available components |
|---|---|
| Linux amd64 and arm64 | Server and CLI archives, Debian packages, and container images |
| macOS 15 or newer, Apple silicon and Intel | CLI archives |
| Kubernetes | Helm chart for the Linux server and browser |
Linux packages target Debian 12. Archives include the DuckDB runtime; keep
their bin/ and lib/trawl/ directories together. macOS archives use ad-hoc
signatures and are not Apple Developer ID signed or notarized.
Start with the installation guide and
your first query.
Requirements and scope
A server needs persistent storage and PostgreSQL, with separate databases for
authentication and application state. Clients need an API key with the required
permissions and trust in the server's TLS certificate. The browser requires
its own public origin and persistent session key.
Trawl is designed for one node. It does not provide clustering, sharding, or
multi-tenancy. Storage and memory needs depend on ingest volume, retention,
and queries.