SONICWALL VERSION 5
Sawmill is a SonicWall Version 5 log analyzer (it also supports the 1021 other log formats listed to the left).
It can process log files
in SonicWall Version 5 format, and generate dynamic statistics from them,
analyzing and reporting events.
Sawmill can parse SonicWall Version 5 logs, import them into a MySQL, Microsoft SQL Server, or Oracle database (or its own built-in database),
aggregate them, and generate dynamically filtered reports, all through a web interface.
Sawmill can perform SonicWall Version 5 log analysis on any platform, including Windows, Linux, FreeBSD, OpenBSD, Mac OS, Solaris, other UNIX, and others.
Sawmill stores the following non-numerical fields in its database for SonicWall Version 5, generates reports for each field, and allows dynamic filtering on any combination of these fields:
| Field | | Internal Name |
| date/time | | date_time |
| day of week | | day_of_week |
| hour of day | | hour_of_day |
| action | | action |
| source IP | | source_ip |
| source port | | source_port |
| source network | | sourcenetwork |
| destination IP | | destination_ip |
| destination port | | destination_port |
| destination network | | destination_network |
| reason | | reason |
| rule | | rule |
Sawmill stores the following numerical fields in its database for SonicWall Version 5, aggregating them and including them as columns in most reports:
| Numerical Field | | Internal Name |
| events | | events |
| visitors | | visitors |
See Sawmill Features to learn more about Sawmill's options for viewing, customizing, filtering, exporting and scheduling SonicWall Version 5 reports.
Sawmill also supports 1021 other log formats.