Sawmill
Download Sawmill 8.7.4
30 Days Free Trial
Home Products Downloads Purchase Support About About
Sawmill Sawmill

SAWMILLPLUG-IN

ALL PLUG-INS

Sawmill has plug-ins to support the following log formats:

line
CISCO IPS

Sawmill is a Cisco IPS log analyzer (it also supports the 1004 other log formats listed to the left). It can process log files in Cisco IPS format, and generate dynamic statistics from them, analyzing and reporting events. Sawmill can parse Cisco IPS logs, import them into a MySQL, Microsoft SQL Server, or Oracle database (or its own built-in database), aggregate them, and generate dynamically filtered reports, all through a web interface. Sawmill can perform Cisco IPS log analysis on any platform, including Windows, Linux, FreeBSD, OpenBSD, Mac OS, Solaris, other UNIX, and others.

Sawmill stores the following non-numerical fields in its database for Cisco IPS, generates reports for each field, and allows dynamic filtering on any combination of these fields:

Field  Internal Name
   date/time  date_time
   hour of day  hour_of_day
   day of week  day_of_week
   f1  f1
   Event ID  event_id
   severity  severity
   sensor  sensor
   f5  f5
   sig id  sig_id
   signature name  signature_name
   f11  f11
   f12  f12
   Signature Version  signature_version
   source address  src_address
   source port  src_port
   variable  variable
   destination address  dst_address
   destination port  dst_port
   f19  f19
   direction  direction
   f22  f22
   f23  f23
   f24  f24
   f25  f25
   interface  interface
   f27  f27
   virtual sensor  virtual_sensor
   f29  f29
   f30  f30
   f31  f31
   f32  f32
   risk rating  risk_rating
   threat rating  threat_rating
   protocol  protocol
   alarm status  alarm_status
   f37  f37

Sawmill stores the following numerical fields in its database for Cisco IPS, aggregating them and including them as columns in most reports:

Numerical Field  Internal Name
   events  events

See Sawmill Features to learn more about Sawmill's options for viewing, customizing, filtering, exporting and scheduling Cisco IPS reports.

Sawmill also supports 1004 other log formats.

© 2014 Flowerfire | Copyright | Privacy Policy | License Agreement | Terms of Use | Contact | Feedback | About
Sawmill Software
Sawmill Software
Back to Sawmill Home