Hi,
>An event is a row with a primary key along the lines of (colo, host,
>category) and an associated set of tags, where each tag has a type and a value
>(eg: {"color": "red", "owner": "fred", "status": "open"...}).
What about simple table with several columns and hstore field for tags?
You may also normalize it (move hosts and categories to separate table).
indexes should help you with fast filtering, or you may load data from this table to denormalized olap table once a day and build index there to speed-up queries.
Ilya Kazakevich
JetBrains
http://www.jetbrains.com
The Drive to Develop