MICROSOFT WINDOWS 7/2008 EVENTLOG VIA SYSLOG
Sawmill is a Microsoft Windows 7/2008 Eventlog via Syslog log analyzer (it also supports the 1020 other log formats listed to the left).
It can process log files
in Microsoft Windows 7/2008 Eventlog via Syslog format, and generate dynamic statistics from them,
analyzing and reporting events.
Sawmill can parse Microsoft Windows 7/2008 Eventlog via Syslog logs, import them into a MySQL, Microsoft SQL Server, or Oracle database (or its own built-in database),
aggregate them, and generate dynamically filtered reports, all through a web interface.
Sawmill can perform Microsoft Windows 7/2008 Eventlog via Syslog log analysis on any platform, including Windows, Linux, FreeBSD, OpenBSD, Mac OS, Solaris, other UNIX, and others.
Sawmill stores the following non-numerical fields in its database for Microsoft Windows 7/2008 Eventlog via Syslog, generates reports for each field, and allows dynamic filtering on any combination of these fields:
|Field|| ||Internal Name|
| ||event code|| ||event_code|
| ||event description|| ||event_description|
| ||process|| ||process|
| ||priority|| ||priority|
| ||message|| ||message|
| ||account name|| ||account_name|
| ||Account Domain|| ||account_domain|
| ||logon ID|| ||logon_id|
| ||process name|| ||process_name|
| ||workstation name|| ||workstation_name|
| ||source network address|| ||source_network_address|
| ||source port|| ||source_port|
Sawmill stores the following numerical fields in its database for Microsoft Windows 7/2008 Eventlog via Syslog, aggregating them and including them as columns in most reports:
|Numerical Field|| ||Internal Name|
| ||events|| ||events|
See Sawmill Features to learn more about Sawmill's options for viewing, customizing, filtering, exporting and scheduling Microsoft Windows 7/2008 Eventlog via Syslog reports.
Sawmill also supports 1020 other log formats.