Sawmill, the multi-discipline customizable log file analysis and reporting software, a multi-processing analytics engine for the concurrent analysis of multiple log files and event logs. Sawmill hosts securely on your own servers (Unix, Linux, Mac, Windows) providing the most secure environment for your most valuable data.
Sawmill analyses text log files from any source and any location, producing highly readable and actionable reports and alerts – condensing the extracted data into customised dashboards to make event recognition and trend utilisation so much quicker to assimilate and use. Sawmill analyze, monitor and alert a wide range of systems. Sawmill provides extensive log processing and reporting features to get the best possible insight into your network data.
Sawmill Dashboard is normally the default report in Sawmill and consists of a group of report pages combined on a single screen. The user can determine how a dashboard is constructed (i.e. what report pages it contains) so that the most important data is collectively displayed on a single screen for immediate assimilation and action by the user. A Report can have multiple dashboards. see below Sawmill Dashboard.

Anyone who needs to understand how their business works, how safe it is, how company’s resources are being used, how their customers are being served, their internet bandwidth, who is consuming the bandwidth and how, what visitors are looking at on their website, what is being purchased, who has accessed which fileservers and which files, who is on their network and who is logged-in, websites being surfed by their employees, how many threats were blocked, etc. etc. etc. This type of information is needed by every manager or business owner hoping to keep better control of his business and his employees in this interconnected world by reducing risks and staying legal.
What host platforms are supportted |
The downloadable trial version contains binaries for Linux, Windows and Macintosh, plus encrypted source code for compiling to other platforms. Hardware specifications for the Sawmill server are dependent on the size of the log files and the ‘live data’ retention period, plus the pattern and type of use (live reports, static reports, report requests and request frequency etc.). Memory should be 2GB for each processor core, but more memory is always a bonus. Good processor platforms for Sawmill are Intel or AMD, with Windows and Solaris on Intel/ AMD also very good. Sawmill is also installable in a virtual machine environment.
Sawmill Lite |
Sawmill Professional |
Sawmill Enterprise |
Sawmill Features by Edition:
How does Sawmill access log files |
Sawmill is agent-free. Logs stored on a network accessible drive are accessed pointing and clicking on the file containing the logs to give Sawmill the path. When a Profile runs Sawmill will automatically import the incremental logs not already imported. Logs stored remotely can be accessed by ftp/sftp. When logs are imported they are pre-processed by a plug-in and parsed into the normalised Sawmill internal format and entered into the database. Each Profile creates and maintains its own database.
- Customize the user interface
- Create your own reporting strategy
- Create custom reports with calculated columns
- Combine external metadata into reports
ACCESS CONTROLS & SECURITY |
- Role Based Access Controls for unlimited users
- Grant privileged access rights to authenticated users
- LDAP/AD (Active Directory) support
- View reports via HTTPS
- A Sawmill license is forever
- No licensing limit on users
- No licensing limit on hits, visitors, sessions
- No licensing limit on log sizes