Sawmill
Download Sawmill 8.7.4
30 Days Free Trial
Home Products Downloads Purchase Support About About
Sawmill Sawmill

SAWMILLPLUG-IN

ALL PLUG-INS

Sawmill has plug-ins to support the following log formats:

line
BINDVIEW WINDOWS EVENT LOG

Sawmill is a Bindview Windows Event Log log analyzer (it also supports the 1004 other log formats listed to the left). It can process log files in Bindview Windows Event Log format, and generate dynamic statistics from them, analyzing and reporting events. Sawmill can parse Bindview Windows Event Log logs, import them into a MySQL, Microsoft SQL Server, or Oracle database (or its own built-in database), aggregate them, and generate dynamically filtered reports, all through a web interface. Sawmill can perform Bindview Windows Event Log log analysis on any platform, including Windows, Linux, FreeBSD, OpenBSD, Mac OS, Solaris, other UNIX, and others.

Sawmill stores the following non-numerical fields in its database for Bindview Windows Event Log, generates reports for each field, and allows dynamic filtering on any combination of these fields:

Field  Internal Name
   date/time  date_time
   day of week  day_of_week
   hour of day  hour_of_day
   machine name  machine_name
   event code  event_code
   reason  reason
   username  user_name
   domain  domain
   logon type  logon_type
   logon process  logon_process
   authentication package  authentication_package
   workstation name  workstation_name
   caller user name  caller_user_name
   caller domain  caller_domain
   caller logon ID  caller_logon_id
   caller process ID  caller_process_id
   transited services  transited_services
   source network address  source_network_address
   source port  source_port
   type  type
   event type  event_type
   process  process
   category  category
   logon account  logon_account
   logon ID  logon_id
   source workstation  source_workstation
   error code  error_code
   status code  status_code
   substatus code  substatus_code

Sawmill stores the following numerical fields in its database for Bindview Windows Event Log, aggregating them and including them as columns in most reports:

Numerical Field  Internal Name
   events  events

See Sawmill Features to learn more about Sawmill's options for viewing, customizing, filtering, exporting and scheduling Bindview Windows Event Log reports.

Sawmill also supports 1004 other log formats.

© 2014 Flowerfire | Copyright | Privacy Policy | License Agreement | Terms of Use | Contact | Feedback | About
Sawmill Software
Sawmill Software
Back to Sawmill Home