JUNIPER SA-2500
Sawmill is a Juniper SA-2500 log analyzer (it also supports the 1021 other log formats listed to the left).
It can process log files
in Juniper SA-2500 format, and generate dynamic statistics from them,
analyzing and reporting events.
Sawmill can parse Juniper SA-2500 logs, import them into a MySQL, Microsoft SQL Server, or Oracle database (or its own built-in database),
aggregate them, and generate dynamically filtered reports, all through a web interface.
Sawmill can perform Juniper SA-2500 log analysis on any platform, including Windows, Linux, FreeBSD, OpenBSD, Mac OS, Solaris, other UNIX, and others.
Sawmill stores the following non-numerical fields in its database for Juniper SA-2500, generates reports for each field, and allows dynamic filtering on any combination of these fields:
 | Field |    | Internal Name | 
|     | date/time |    | date_time | 
|     | message |    | message | 
|     | source IP |    | source_ip | 
|     | source port |    | source_port | 
|     | platform |    | platform | 
|     | username |    | user_name | 
|     | user realm |    | user_realm | 
|     | user role |    | user_role | 
|     | status |    | status | 
|     | action |    | action | 
|     | request method |    | request_method | 
|     | URL |    | url | 
|     | file type |    | file_type | 
|     | result |    | result | 
|     | destination |    | destination | 
|     | destination path |    | destination_path | 
|     | destination port |    | destination_port | 
|     | upload/download file type |    | upload_download_file_type | 
|     | protocol |    | protocol | 
|     | scheme |    | scheme | 
|     | items listed |    | items_listed | 
|     | start time |    | start_time | 
|     | meeting id |    | meeting_id | 
|     | meeting description |    | meeting_description | 
|     | meeting name |    | meeting_name | 
|     | Total attendees |    | meeting_attendee | 
|     | Total transmitted data size(KB) |    | meeting_data | 
Sawmill stores the following numerical fields in its database for Juniper SA-2500, aggregating them and including them as columns in most reports:
 | Numerical Field |    | Internal Name | 
|     | events |    | events | 
|     | session events |    | session_events | 
|     | unique source IPs |    | unique_source_ips | 
|     | bytes sent |    | bytes_sent | 
|     | bytes received |    | bytes_received | 
|     | chunks written |    | chunks_written | 
|     | chunks read |    | chunks_read | 
|     | Planned meeting duration |    | planned_meeting_duration | 
|     | Meeting attendee duration |    | meeting_attendee_duration | 
|     | Web access duration |    | web_access_duration | 
|     | connection duration |    | connection_duration | 
|     | terminal connections authorized |    | terminal_connections_authorized | 
See Sawmill Features to learn more about Sawmill's options for viewing, customizing, filtering, exporting and scheduling Juniper SA-2500 reports.
Sawmill also supports 1021 other log formats.