Blue Coat Log Analyzer

Sawmill is a Blue Coat log analyzer (it also supports 827 other log formats). It can process log files in Blue Coat format, and generate dynamic statistics from them, analyzing and reporting events. Sawmill can parse Blue Coat logs, import them into a SQL database (or its own built-in database), aggregate them, and generate dynamically filtered reports, all through a web interface. Sawmill can perform Blue Coat log analysis on any platform, including Window, Linux, FreeBSD, OpenBSD, Mac OS, Solaris, other UNIX, and others.

Sawmill stores the following non-numerical fields in its database for Blue Coat, generates reports for each field, and allows dynamic filtering on any combination of these fields:

	Field		Internal Name
	date/time		date_time
	day of week		day_of_week
	hour of day		hour_of_day
	source IP		source_ip
	server hostname		server_hostname
	server IP		server_ip
	page		page
	file type		file_type
	worm		worm
	server response		server_response
	operation		operation
	class		class
	rule		rule
	protocol		protocol

Sawmill stores the following numerical fields in its database for Blue Coat, aggregating them and including them as columns in most reports:

	Numerical Field		Internal Name
	hits		hits
	page views		page_views
	visitors		visitors
	bytes sent		bytes_sent

Sawmill also supports 827 other log formats; see Sawmill Features for a list containing Blue Coat and all the other supported formats.