Sawmill is a powerful, hierarchical log analysis tool, well suited for web server access and referrer logs, but can process almost any log.

Sawmill X runs as a CGI program on your web server, and publishes an intuitive graphical user interface that may be used from any web browser to configure and run Sawmill, or to view the statistics pages.

The statistics pages are hierarchical, attractive, and heavily crosslinked for easy navigation. Complete documentation is built directly into the program.

Sawmill provides an extensive set of features, including a persistent database, fine control over the appearance of stats pages, and versatile log filtering options.

Here are some key features of "Sawmill":

· Easy To Use
· Extensive Documentation
· Live Reports & Graphs
· Package of Powerful Analysis Tools
· Attractive Statistics
· Database Driven
· Advanced User Tracking by WebNibbler
· Very Fast
· Easy To Install
· Highly Configurable
· Works With a Variety of Platforms
· Processes Almost Any Log File.

Requirements:

· At least 256 MB RAM, 1 GB preferred
· 500 MB disk space for an average database
· As much CPU power as you can get

Limitations:

· 30 days trial period.

What's New in This Release: [ read full changelog ]

Bugs fixed:
· [659410] Creating a profile with Mirapoint SMTP Log Format gives an error, 'Unknown configuration group "date_time" in node "profiles..log.fields"'.
· [662875] When using Professional trial mode, Save Report To Menu gives an error, "Checksum does not match for file 'templates/statistics/save_as_new_report/get_report_dat.cfv'. Your licensing does not permit editing of template files, but it looks like that file has been edited. Please upgrade to Enterprise licensing if you need to edit templates, or remove the edits from that file to continue with your current licensing."
· [662959] Updating a database when the database has not yet been build gives an error, "Can't find tableAlias=main_table, fieldName=bottomleveldate in table main_table_join_sessions_join".
· [665590] Use of an ODBC log source on a Microsoft SQL Server with a BIGINT field, results in an error, "Invalid log source Unknown ODBC type; 5"
· [665606] Cross-reference builds done with the internal database, with large datasets, sometimes give an error like, "Internal: list 99 in IntegerLists .... ends with -3412465, which is the start of a range"
· [671050] In some circumstances, dates which have data are not clickable in the Date Picker.
· [671133] If a scheduled task is running when a second scheduled task is scheduled to run, the second task does not start, in some cases.
· [671684] A session contains filter, using wildcards, on a page which does not exist, gives an error, "Internal Error: Empty node name."
· [671949] The global_date_filename_regular_expression has no effect in multiprocessor database builds.
· [679482] Fixed a bug which could cause an error on database build or update, similar to "#### Internal: listitem=338931424, which is larger than the array cache size (308152)."
· [680155] Database builds may crash at the end of log reading, if DNS lookup is turned on, and parsing servers are being used for multiprocessor building.
· [680181] Numeric comparisons in report filters give incorrect results.
· [680671] Running a multiprocessor "split" build (using Sawmill to split data into multiple per-profile log datasets) can result in an error "mismatched brackets" in the info.cfg file.
· [681790] Removing data from a database without session information gives an error, "Can't delete file LogAnalysisInfo/Databases//main/session_table_info.cfg".

New features:
· [606985] Added a plug-in to report on OpenFire IM logs. These are XML logs and the lines can be extremely long. Testing was done by introducing newlines between closing and opening packet tags.
· [661926] Added new support for AIX CPU Utilization log format.
· [667394] Added support for Communigate Pro 5.2 to the Communigate Pro Log Format plug-in. Improved tracking of multiple recipients. Eliminated counting a message twice when ACCOUNT/delivered and DEQUEUER/LOCAL/delivered are both in the log. Added basic support for DEQUEUER/LIST/relayed. Eliminated underused operation field and added an action field just for delivery type. Added Queue ID field.