Sawmill is a Net-Wall log analyzer (it also supports the 1020 other log formats listed to the left).
It can process log files
in Net-Wall format, and generate dynamic statistics from them,
analyzing and reporting events.
Sawmill can parse Net-Wall logs, import them into a MySQL, Microsoft SQL Server, or Oracle database (or its own built-in database),
aggregate them, and generate dynamically filtered reports, all through a web interface.
Sawmill can perform Net-Wall log analysis on any platform, including Windows, Linux, FreeBSD, OpenBSD, Mac OS, Solaris, other UNIX, and others.
Sawmill stores the following non-numerical fields in its database for Net-Wall, generates reports for each field, and allows dynamic filtering on any combination of these fields:
|Field|| ||Internal Name|
| ||date/time|| ||date_time|
| ||day of week|| ||day_of_week|
| ||hour of day|| ||hour_of_day|
| ||host|| ||host|
| ||type|| ||type|
| ||LVLl|| ||lvl|
| ||program|| ||prog|
| ||rule|| ||rule|
| ||protocol|| ||proto|
| ||action|| ||action|
| ||source IP|| ||src_ip|
| ||source|| ||src|
| ||source port|| ||src_port|
| ||destination IP|| ||dst_ip|
| ||destination|| ||dst|
| ||destination port|| ||dst_port|
| ||service|| ||service|
| ||I type|| ||itype|
| ||side in|| ||side_in|
| ||side out|| ||side_out|
| ||side exp|| ||side_exp|
| ||connection state|| ||cnx_state|
| ||level info|| ||lvl_info|
| ||acknowledged bytes in|| ||ibyte_ack|
| ||acknowledged packets in|| ||ipacket_ack|
Sawmill stores the following numerical fields in its database for Net-Wall, aggregating them and including them as columns in most reports:
|Numerical Field|| ||Internal Name|
| ||accesses|| ||accesses|
| ||visitors|| ||visitors|
| ||bytes|| ||bytes|
See Sawmill Features to learn more about Sawmill's options for viewing, customizing, filtering, exporting and scheduling Net-Wall reports.
Sawmill also supports 1020 other log formats.