ShrouDB Engine
Chronicle
One audit trail across every engine.
Chronicle aggregates decision logs, command traces, and key lifecycle events into one queryable stream. Answer auditor questions without grepping seven log files.
QUERYSTREAMALERTAUDIT_LOG
Features
- Unified event stream across every engine
- Ingest audit events, command traces, key lifecycle events
- Query with filtering, aggregation, and time windows
- Hotspot detection and error-rate tracking
- Active actor and source monitoring
- HTTP sidecar for external ingestion
Quickstart (standalone)
chronicle.toml
bind = ":7009"
http_bind = ":8009"
[storage]
retention_days = 30
max_batch_size = 1000terminal
$ shroudb-chronicle --config chronicle.tomlCommand reference
| Command | Args | Description |
|---|---|---|
| QUERY | <filter> | Query events with a filter |
| STREAM | <filter> | Stream events in real time |
| ALERT | <rule> | Define an alert rule |
| AUDIT_LOG | <actor> | Fetch audit log for an actor |
| COUNT | <filter> | Count matching events |
| HOTSPOTS | [TOP N] | Find the most active paths |
| ERRORS | [WINDOW] | List errors in a window |
| ACTORS | [WINDOW] | List active actors in a window |
Bundle into Moat
Drop Chronicle into a unified Moat process and it inherits the shared auth layer, storage, and telemetry — no extra wiring.
moat.toml
[engines.chronicle]
enabled = true
retention_days = 30Run Chronicle in production today
Free on ShrouDB Cloud up to 10k ops/month — no card required.