Firewall-1 Next Generation Full Log Format (text export) Log Analyzer

Sawmill is a Firewall-1 Next Generation Full Log Format (text export) log analyzer (it also supports 827 other log formats). It can process log files in Firewall-1 Next Generation Full Log Format (text export) format, and generate dynamic statistics from them, analyzing and reporting events. Sawmill can parse Firewall-1 Next Generation Full Log Format (text export) logs, import them into a SQL database (or its own built-in database), aggregate them, and generate dynamically filtered reports, all through a web interface. Sawmill can perform Firewall-1 Next Generation Full Log Format (text export) log analysis on any platform, including Window, Linux, FreeBSD, OpenBSD, Mac OS, Solaris, other UNIX, and others.

Sawmill stores the following non-numerical fields in its database for Firewall-1 Next Generation Full Log Format (text export), generates reports for each field, and allows dynamic filtering on any combination of these fields:

	Field		Internal Name
	date/time		date_time
	day of week		day_of_week
	hour of day		hour_of_day
	product		product
	interface		interface
	origin		origin
	type		type
	action		action
	service		service
	source host		source_host
	destination host		destination_host
	protocol		protocol
	rule		rule
	source port		source_port
	user		user
	translated source		translated_source
	translated destination		translated_destination
	translated source port		translated_source_port
	translated destination port		translated_destination_port
	partner		partner
	info		info

Sawmill stores the following numerical fields in its database for Firewall-1 Next Generation Full Log Format (text export), aggregating them and including them as columns in most reports:

	Numerical Field		Internal Name
	hits		hits
	visitors		visitors

Sawmill also supports 827 other log formats; see Sawmill Features for a list containing Firewall-1 Next Generation Full Log Format (text export) and all the other supported formats.