MICROSOFT WINDOWS 7/2008 EVENTLOG VIA SYSLOG
Sawmill is a Microsoft Windows 7/2008 Eventlog via Syslog log analyzer (it also supports the 892 other log formats listed to the left).
It can process log files
in Microsoft Windows 7/2008 Eventlog via Syslog format, and generate dynamic statistics from them,
analyzing and reporting events.
Sawmill can parse Microsoft Windows 7/2008 Eventlog via Syslog logs, import them into a MySQL, Microsoft SQL Server, or Oracle database (or its own built-in database),
aggregate them, and generate dynamically filtered reports, all through a web interface.
Sawmill can perform Microsoft Windows 7/2008 Eventlog via Syslog log analysis on any platform, including Window, Linux, FreeBSD, OpenBSD, Mac OS, Solaris, other UNIX, and others.
Sawmill stores the following non-numerical fields in its database for Microsoft Windows 7/2008 Eventlog via Syslog, generates reports for each field, and allows dynamic filtering on any combination of these fields:
| Field | | Internal Name |
|---|
| | event code | | event_code |
| | event | | event |
| | process | | process |
| | priority | | priority |
| | message | | message |
| | account name | | account_name |
| | Account Domain | | account_domain |
| | logon ID | | logon_id |
| | process name | | process_name |
| | Workstation Name | | worksatation_name |
| | source network address | | source_network_address |
| | source port | | source_port |
| | source address | | source_address |
| | destination address | | destination_address |
| | destination port | | destination_port |
| | protocol | | protocol |
| | client address | | client_address |
| | client port | | client_port |
| | object name | | object_name |
Sawmill stores the following numerical fields in its database for Microsoft Windows 7/2008 Eventlog via Syslog, aggregating them and including them as columns in most reports:
| Numerical Field | | Internal Name |
|---|
| | events | | events |
See Sawmill Features to learn more about Sawmill's options for viewing, customizing, filtering, exporting and scheduling Microsoft Windows 7/2008 Eventlog via Syslog reports.
Sawmill also supports 892 other log formats.
