SONICWALL VERSION 5
Sawmill is a SonicWall Version 5 log analyzer (it also supports the 1021 other log formats listed to the left).
It can process log files
in SonicWall Version 5 format, and generate dynamic statistics from them,
analyzing and reporting events.
Sawmill can parse SonicWall Version 5 logs, import them into a MySQL, Microsoft SQL Server, or Oracle database (or its own built-in database),
aggregate them, and generate dynamically filtered reports, all through a web interface.
Sawmill can perform SonicWall Version 5 log analysis on any platform, including Windows, Linux, FreeBSD, OpenBSD, Mac OS, Solaris, other UNIX, and others.
Sawmill stores the following non-numerical fields in its database for SonicWall Version 5, generates reports for each field, and allows dynamic filtering on any combination of these fields:
| Field | | Internal Name |
| | date/time | | date_time |
| | day of week | | day_of_week |
| | hour of day | | hour_of_day |
| | action | | action |
| | source IP | | source_ip |
| | source port | | source_port |
| | source network | | sourcenetwork |
| | destination IP | | destination_ip |
| | destination port | | destination_port |
| | destination network | | destination_network |
| | reason | | reason |
| | rule | | rule |
Sawmill stores the following numerical fields in its database for SonicWall Version 5, aggregating them and including them as columns in most reports:
| Numerical Field | | Internal Name |
| | events | | events |
| | visitors | | visitors |
See Sawmill Features to learn more about Sawmill's options for viewing, customizing, filtering, exporting and scheduling SonicWall Version 5 reports.
Sawmill also supports 1021 other log formats.