Sawmill
Sawmill 8.7.3.2
Your rating: Now say why...

(2) 2.75

Hierarchical Web server log analyzer.   Demo ($99.00)
Add to my Watch List
Email me when discounted
Sawmill is a powerful, hierarchical log analysis tool, well suited for Web server access and referrer logs, but can process almost any log. It runs as a CGI program on your Web server, and publishes an intuitive graphical user interface which can be used from any Web browser to configure and run Sawmill, or to view the statistics pages. The statistics pages are hierarchical, attractive, and heavily crosslinked for easy navigation. Complete documentation is built directly into the program. Sawmill provides an extensive set of features, including a persistent database, fine control over
What's New
Version 8.7.3.2:

New:

  • [1285416] Display a "Before you start" section in Admin/Profiles to new users, it is only shown after a new setup. The section reminds new users to disable Antivirus software for the Sawmill directory and shows some links to best practice guides when processing large datasets.
  • [1299190] Added support for IronPort S-Series with pseudo-W3C (pattern) headers.
  • [1301348] Added support for WebLogic 10 log format (by extending the existing WebLogic 8 plug-in so it can handle both).
  • [1301358] Added support to show a warning message for missing log fields in the New Profile Wizard. The warning message will be shown if required log fields are defined in a warn_on_missing_log_fields node in the log format plug-in and if these log fields are not detected in the log files.
  • [1301531] Added support for Kerio Control security log format.
  • [1301630] Added rendering of very large byte counts as Terabytes, Petabytes, and Exabytes.
  • [1301689] Substantially rewrote support for the OpenVPN plug-in so it supports the latest format of log data, parses faster, supports any syslog header, and more.
  • [1301696] Enhanced IPCop Syslog support to handle date header lines.
  • [1301859] Added support for NPR Reporting log format.
  • [1301902] When reporting on Cisco PIX/IOS log data, dynamic Teardown lines are ignored, resulting in lower than expected reported duration.
  • [1301976] Added support for Cisco IronPort S-Series (WSA) CSV export format.
  • [1302060] Added option to Report Options/CSV Export to convert the "(empty)" value to any custom defined value.
  • [1302205] Display operating system and architecture in About window.
  • [1302286] Display a warning message in File Manager/Network Shares when the "Map drive letter" is selected.
  • [1302301] Added support for F-Secure HTTP Access log format
  • [1302454] Added support for Zimbra mail server log format
  • [1302671] Added support for IPCop Snort multiline log format.
  • [1302844] Added support for FreeProxy log format
  • [1303041] Added support for Sophos UTM Web Application Firewall log format.
  • [1303190] Display best practice tips in New Profile Wizard on log source and database page and in Scheduler.
  • [1303191] Improved styling of the Help Manual and added a Best Practice Guides section.
  • [1303424] Added support for Websense Server log format.
  • [1303461] Added "Show/Hide Created By Column" in Profiles/View menu. The column can now be set per user. User access can be set in Admin/Roles.
  • [1303462] Moved "Show/Hide Database Info Column" from Profiles View Editor to Profiles/View menu. The column can now be set per user. User access can be set in Admin/Roles.
  • [1303794] Added support for FortiGate 300 Series log format.
  • [1304249] The "database info column" is now visible by default in the Profiles list.
  • [1304335] Added support for InterMapper Chart log format.
Bugs fixed:
  • [1296642] When "Use overview for totals" is checked, the Other Items row can show a negative number. (This is fixed by showing a dash in this case).
  • [1299899] If a report is generating, and a database-writing task like a rebuild or update runs, the database will be altered underneath the running report, possibly causing an error in report generation. This is now fixed by delaying the rebuild or update until no reports are running.
  • [1301487] Apache Custom profiles are created with a duplicate file_type field, resulting in a build error, "Trying to compute 'file_type' field, but there is no 'page' field to compute it from."
  • [1301592] Added info text to Profiles View feature permission in Roles, visible when Edit is checked.
  • [1301593] Added Admin Tools feature permission in Roles.
  • [1301594] Internet Explorer 8, IE9 and IE10 hangs when loading the profiles page and when Internet Explorer's "View all websites in Compatibility View" option is checked.
  • [1301596] Fixed minor language variable issues in Admin/Profiles and Admin/Tools.
  • [1301665] Remainder row shows negative values for fields with aggregation method unique when "Use overview for totals" is checked.
  • [1301907] In the analysis of Juniper SSL VPN log data, "VPN Tunneling: Session ended for user with IP" lines are ignored, possible resulting in very long reported session durations for those sessions.
  • [1301918] When using the internal database, indices do not improve the performance of single-value report filters on single fields.
  • [1302023] Multiprocessor SSQL queries (e.g., from main table reports generated with "query splitting" turned on) crash or generate an internal error.
  • [1302306] Attempting to create a profile from log data in Windows 2000/2003/2008 DNS Log Format, given an error "no date_time in snapons" during the Create Profile Wizard.
  • [1302380] Reports generated from MDaemon 13 logs show no events.
  • [1302651] Sending a report by email with multiple recipient email addresses causes a SMTP server error in some mail servers.
  • [1302908] When analyzing servuftp logs, the Log Detail report fails with an error, "Unexpected text at end of SSQL field description: '_file'"
  • [1303189] The profiles list is not properly sorted after a profile has been renamed.
  • [1303428] Editing the last action in scheduler overrides the first action with the last action.
  • [1303868] Report filter items of type within/matches are not added and not editable in Reports/Filters.
  • [1303979] Manage fields in an overview report element allows to add non-aggregating fields which cause an error in reports. Fixed so that only aggregating fields can be added in overview report elements.
  • [1304170] A report element which displays one or more chronological graphs without a table and with no filters applied causes an "Unable to read file" error. The error only occurs if the profile uses the internal database, profiles with an external database are not affected.
  • [1304248] Sawmill Lite displays a "No Permission" page when navigating to the Config/Log Source page or to a Tools page.
  • [1304349] When creating a MySQL profile with a non-default port, an error occurs at the end of profile creation like, "Failed to connect to MySQL database at 127.0.0.1:3302 with username 'user'"
  • [1304406] When a regular expression table filter, or "omit parenthesized items," is used on a report column of type non-aggregating integer, an error occurs like, "Internal: attempt to get string value from non-varchar column 0 of table 'xref2' with GetStringCell()".
  • [1305369] Clicking on Customize Report Element or Export in Reports throw an error in Internet Explorer 6, 7 and 8.

Version 8.7.3.2:

New:

  • [1285416] Display a "Before you start" section in Admin/Profiles to new users, it is only shown after a new setup. The section reminds new users to disable Antivirus software for the Sawmill directory and shows some links to best practice guides when processing large datasets.
  • [1299190] Added support for IronPort S-Series with pseudo-W3C more...
Requirements
Intel/PPC, OS X 10.4 or later





MacUpdate - Sawmill




  • Webalizer
    +2

  • Funnel Web
    +1

  • Analog
    +1

  • TrendyMac
    +1
Sawmill User Discussion (Write a Review)
ver. 8.x:
(2)
Your rating: Now say why...
Overall:
(5)

sort: smiles | time
burypromote
-1

-6

CR1776 reviewed on 14 May 2012
Didn't work properly with the trail version on 10.7.3
[Version 8.5.6.3]


burypromote

-28

Davebarnes reviewed on 18 Jan 2011
I am a huge fan of Sawmill.
I use it every month to create website traffic analysis reports for 20 customers' websites.

For years I used WebTrends, but then they decided they did not want my money and so I looked at alternatives. Many alternatives.

Sawmill is an excellent product. Flowerfire has very good support.

My only negative is that the manual is not as clear and thorough as it could be.

By the way, I also use Google Analytics on most sites as it is great when a customer wants a snapshot "right now".
[Version 8.1.8.1]


burypromote
+1

+97
Edified commented on 09 Jun 2006
This is pretty neat software that uses an epimodular approach to log analysis. It spits out really nice html that you can view from anywhere. I have it set up on a script so I can update and view my stats in a password protected web directory on the server.

It's good at differentiating traffic type to.
[Version 7.2.6]


burypromote
+1


Anonymous reviewed on 01 May 2005
Sawmill is a highly flexible if sometimes daunting application. It is miles ahead of other packages in terms of the ability to filter, format, and otherwise dig through my Web logs. Two features that I like are: the ability to filter out MY visits to my (remotely hosted) site, as well as identifiable bots; and, the ability to trace visitors paths through the site. I've gleaned valuable information (not sure it is yet profitable) about how visitors traverse my site. To the first point, I was surprised my how much of the traffic that Webalizer and Analog (provided by my Web host) report are, in fact, due to my own visits and the visits of bots.
[Version 7.1]


burypromote
+1


Anonymous reviewed on 09 Aug 2004
No, no, even though webalizer and analog exist, this one is worth every penny. It's quite powerful, and has a clean interface.
I love my webalizer, but I would take Sawmill over it, any day of the week.
[Version 7.0.1]


burypromote
-2


Anonymous reviewed on 15 Jul 2004
Who needs this when Webalizer exists? Analog? Don't even think about buying this.
[Version 7.0b13]

1 Reply

burypromote
Anonymous commented on 01 Aug 2004
Webalizer and analog generate static reports. This is a database application that can generate new reports and correlate data on the fly. It's much, much more flexible and much more useful if you need an in depth analysis of, for example, who hit which pages.

Also, Sawmill can do more than just Web logs. Firewalls, mail servers, virtually anything that produces a text file.
There are currently no troubleshooting comments. If you are experiencing a problem with this app, please post a comment.

There are currently no ratings. Write a comment or review now.

Downloads:29,468
Version Downloads:36
Type:Internet : Servers
License:Demo
Date:22 Apr 2014
Platform:PPC 32 / Intel 64 / Intel 32 / OS X
Price: $99.00
Overall (Version 8.x):
Features:
Ease of Use:
Value:
Stability:
Displaying 1-6 of 6
-
-
-
Please login or create a new
MacUpdate Member account
to use this feature
Watch Lists are available to
MacUpdate Desktop Members
Upgrade Now
Install with MacUpdate Desktop.
Save time moving files & cleaning
up space wasting archives.
Sawmill is a powerful, hierarchical log analysis tool, well suited for Web server access and referrer logs, but can process almost any log. It runs as a CGI program on your Web server, and publishes an intuitive graphical user interface which can be used from any Web browser to configure and run Sawmill, or to view the statistics pages. The statistics pages are hierarchical, attractive, and heavily crosslinked for easy navigation. Complete documentation is built directly into the program. Sawmill provides an extensive set of features, including a persistent database, fine control over the appearance of stats pages, and versatile log filtering options.

Sawmill is available in three versions:
  • Lite ($99)
  • Professional ($199)
  • Enterprise ($699)
Sawmill Professional includes its own internal database and Web server for report publishing. Reports can also be run in CGI mode on another Web server either local or remote.


- -