About Trino

Graylog API Security is built on Trino, formerly known as PrestoSQL. This was originally developed at Facebook but is now an independent open-source project. Trino is a powerful distributed query engine that provides a common SQL interface to many popular databases and has a small footprint compared with many big data platforms.

API Security extends and optimizes Trino in a few key ways:

• The web interface runs alongside the Trino web UI.
• API Security uses native Iceberg support provided by Trino.
• API Security adds a hot-data storage engine for short-term capture and querying of API calls.
• API Security seamlessly replicates data to Iceberg while providing uninterrupted query access to all API calls.
• API Security adds custom scalar and aggregate functions to optimize queries on API calls.
• API Security inherits all Trino security features for TLS, user authentication, and user permissions.

We're happy to support and contribute back to the Trino community!