Sawmill 8.1.3.1 - Hierarchical web server log analyzer. (Demo)

Sawmill is a powerful, hierarchical log analysis tool, well suited for web server access and referrer logs, but can process almost any log. It runs as a CGI program on your web server, and publishes an intuitive graphical user interface which can be used from any web browser to configure and run Sawmill, or to view the statistics pages. The statistics pages are hierarchical, attractive, and heavily crosslinked for easy navigation. Complete documentation is built directly into the program. Sawmill provides an extensive set of features, including a persistent database, fine control over the appearance of stats pages, and versatile log filtering options.

Fixed:

• When the language in the Preferences does not match the language for the current user, reports can contain a mix of languages.
• Database build, using an Oracle database, with a database field whose internal name exceeds 30 characters, fails with an error \"ORA-00972: identifier is too long\"
• If all lines of log data are rejected during log processing, the resulting database, which correctly shows zeros for all values, incorrectly shows \"01/Jan/1970, 1 day (entire date range)\" as the date range in the Reports page.
• The date range at the top of Reports shows 1970, when there are no entries in the database.
• When the Log Detail is filtered, then paged, the second page data matches that of the first page.
• Building a database with more than 64 main table indices (e.g., a default profile with more than 64 non-aggregating field) gives an error: Too many keys specified; max 64 keys allowed.
• Apache Custom format strings containing literal \\\" values do not parse properly.
• The Concurrent Session number is computed from the unfiltered session data--report filters have no effect on it.
• The \"+\" operator does not match properly in regular expression log sources when using Show Matching Files in Config->Log Sources.
• The Windows installer does not install the VC++ 2008 redistributable libraries, which can cause errors when trying to start Sawmill, if the libraries are not already installed.
• SFTP log sources give an error \"Unknown SSH server prompt \'Password: \' -- only \'Password:\' is supported\" on certain SFTP servers (specifically, SUSE Linux Enterprise Server 10).
• Building a database with Microsoft SQL Server, in a profile with a session analysis, where the name of the session page field is \"file\" or some other reserved SQL keyword, gives an error like, \"Incorrect syntax near the keyword \'file\'.\"
• When password expiration is configured in Preferences, an error occurs when the password expires: \"Couldn\'t find node login_plugins in\".
• The Session Paths report can cycle back on itself, making sessions infinitely deep, when using the web UI.

• Merged changes from Sawmill 7 that were never replicated in Sawmill 8. This adds support for a new format variant and extracts some additional fields.
• Added support for an all caps string instead of a hex number after the url in the Barracuda Spyware Firewall / Web Filter Log Format plug-in. This field is ignored in all cases because it\'s purpose is unknown.
• Reporting of pass throughs (BP events) was added to the Cisco Wide Area Application Services (WAAS) TCP Proxy log format plug-in for WAAS 4.1.x. Counts of connection starts, pass throughs and two types of connection ends were added to the numeric fields.
• Implemented support in the SHOUTcast W3C Log Format plug-in for a logging problem in SHOUTcast 1.9.8 which causes numeric values Play Duration, Server-to-client bytes and Average Bandwidth. The W3C log format specifies that if there is no value in a field, it must be replaced with a dash, but SHOUTcast logs sometimes have a completely empty cs-user-agent (player) field which caused the remaining fields to be shifted and the value of sc-bytes to end up in the x-duration field. The modified plug-in compensates for this problem. This is an important concern for Soundexchange RIAA reporting.