Haage&Partner HAAGE&PARTNER

Sawmill Changelog


Sawmill 8.7.6 (18.05.2015)

Neue Funktionen:
  • [1319403] Allows date_time database field to have the number of bits to be configureable via the browser. It had been fixed at 16 bits, which caused this problem due to an overflow.
  • [1320092] Added support for TLS/SSL email connections via SMTP.
  • [1323486] Added support for the new OCLC EZproxy standard log format.


Sawmill 8.7.5 (29.01.2015)

Neue Funktionen:
  • [1309202] Added support for Zentyal log format.
  • [1312748] Added support for Bluecoat SGOS6.2/6.4 format.
  • [1313210] Added support for Checkpoint log file format.
  • [1313664] Added support for Optenet log format.
  • [1313713] Added support for Trend Micro Control Manager.
  • [1313714] Support for Trend Micro Deep Security has been added.
  • [1313715] Support for Microsoft Exchange Server 2013 has been added.
  • [1313899] Support for Kiwi ISO Event Sentry Added
  • [1313900] Added support for i-Filter log file format.
  • [1315968] Added support for IWSVA log file format.
  • [1319225] Added support for Gene6 SARL FTP log format.


Sawmill 8.7.4 (26.10.2014)

Neue Funktionen:
  • [1304915] Added database type info in bug reports.
  • [1305496] Improved placement of snapon-generated report groups in the Reports menu, so they always go above Single-page Summary and Log Detail.
  • [1305577] Enhanced Kerio Mailserver support to auto-detect a slight variant, and to report Subjects when present.
  • [1305705] Added support for AWS ELB Log Format.
  • [1306628] Improved the performance of large table reports sorted on a string field which uses itemnums (which is most string fields). Performance is at least 20x faster (20+ minutes to 1 minute) for a 800,000 row example table.
  • [1307095] Added support for a variant of Watchguard Firebox XTM log format.
  • [1307396] Added support for ICAP log format.


Sawmill 8.7.0.4 (09.12.2013)

» Produktseite » Download » Onlineshop

Neue Funktionen:
  • [1288348] Added a new database field type, "unnormalized string," which does not use itemnums to normalize string fields. This is useful for fields which have a large number of unique values, and can greatly improve scalability while retaining full detail of a field.
  • [1291946] Added support for Savvion BPM log format.
  • [1292044] Added a new option attrs parameter to the built-in Salang function ldap_search(); this allows non-user attributes to be queried, which is necessary to use certain LDAP configurations for login.
  • [1293647] Added support for Lotus Notes log format.
  • [1294046] Added support for Windows Event log format (XML).
  • [1295126] Added support for SiteMinder Apache WebAgent Log Format
  • [1295174] Added support for a variant of McAfee Web Gateway log format (version 7.2).
  • [1295942] Added support for Limelight SHOUTcast Service log format.
  • [1296470] Added support for WebLogics Diagnostic log format.
  • [1296714] Extended the Filemaker Access log format plug-in to support version 11.
  • [1297159] Changed the "remove database data" query in MSSQL to remove data in batches of 1 million rows, to keep it from overloading the transaction log for very large datasets.
  • [1297215] Added support to define a custom filename in Reports Export Table.
  • [1297216] Improved reports and config navigation menus and fixed miscellaneous styling issues.
  • [1297217] Added a profiles drop down menu in Reports and Config navigation bar. This allows to switch between profiles without navigating to Admin/Profiles.
  • [1297218] Added a filter field in Admin Profiles. This allows to filter/search the profiles list by profile names.
  • [1297219] Improved admin profiles list loading performance by caching the profiles list in the web browser.
  • [1297221] Improved report element controls, layout and style.
  • [1297222] Added support to run Process Logs from the web user interface. Process Logs is located in the new Tools menu in Config and Reports.
  • [1297405] Enhanced Hurricane MTA support to report the EHLO responses, so it is possible to filter on them, for instance to show only connections supporting TLS.
  • [1298119] Added support for MOVEit DMZ log format
  • [1299364] Added Admin/Profiles dashboard to display basic report values, display the profiles database state and to update/build profiles databases.

Die Liste der Fehlerkorrekturen finden Sie in unserem Supportforum
   Download    
Windows, Mac OS, Linux
  Preise | Kaufen
Ab 210 € (inkl. MwSt.)

Sawmill 8.6.3.1 (09.07.2013)

» Produktseite » Download » Onlineshop

Neue Funktionen:
  • [1288297] Added support for Cisco eCDS log format.
  • [1288692] Added support for SocketLabs Hurricane MTA log format.
  • [1289692] Added "Bounces" and "Bounce Rate" as a standard part of the Web Server Package (affecting all plug-ins which use that package, including Apache Extended, IIS, and many others.
  • [1290423] Added support for DataEnter Xwall log format.
  • [1290844] Added support for {==} (Salang) sections in the database directory parameter, enabling, for instance, automatic creation of a new database every day.
Fehlerkorrekturen:
  • [1288964] In Wowza analysis, for profiles created with Sawmill 8.6.2, play duration is overreported in cases where there are "unpause" events in the logs.
  • [1289068] When attempting to delete an MS SQL profile through the web interface, along with its database, an error occurs, 'Unknown configuration group "admin_pages" in node ""'.
  • [1289278] The new profile wizard does not show the database page in the Pro version.
  • [1289335] Config Reports Editor - "Link to report" list is not properly updated when renaming, adding or deleting new reports in reports editor.
  • [1289722] In some circumstances, a Flash Media Server profile (or possibly other profiles which redefine their log fields during database building) will fail to build with an "Empty node name" error.
  • [1289735] "Link to report" did not open the report in static (generated) report files.
  • [1289736] The reports menu was not shown in static (generated) report files.
  • [1289900] When creating a profile using MSSQL as the database, an error can occur when entering the database name, 'The MS SQL database name must start with a Unicode letter or the characters "_", "@", "#"; followed by one or more letters, numbers or the characters "_", "@", "#", "$". Please define a different database name.'
  • [1289956] When reporting on Chinese Windows syslog files, some characters are garbled in reports.
  • [1290318] A Flash Media Server profile created with the duration field unchecked, has no reports.
  • [1290495] If a SQL prefix is used, an error can occur on database update, "Unable to Execute ODBC Query='select count(*) from main_table_update'; diagnostics=ODBC error: rec1: SQLstate: S0002; msg=[Oracle][ODBC][Ora]ORA-00942: table or view does not exist"
  • [1290731] Fixed a security issue in the update and build database page.
  • [1291076] Profiles created from Akamai Streaming W3C logs, do not track the final field in log.
  • [1291263] Enhanced display format type settings in report fields. Display format types can now be specified for all aggregating fields in exported reports, they can also be different from the HTML settings.

   Download    
Windows, Mac OS, Linux
  Preise | Kaufen
Ab 210 € (inkl. MwSt.)

Sawmill 8.6.2 (23.05.2013)

» Produktseite » Download » Onlineshop

Neue Funktionen:
  • [1275810] Enhanced the "pattern" option for selecting profiles in the Scheduler (and the command line) so a profile matches if either its internal name (filename.cfg) matches, or its label (the way it appears in the Profiles list of the web UI) matches. Previously, only the internal name was checked.
  • [1276977] The language (e.g., Chinese) can now be selected during the Startup Wizard.
  • [1277418] Login plug-ins can now be enabled or disabled from the Preferences.
  • [1277966] All passwords in profiles and Preferences are now encrypted when saved to disk.
  • [1280145] Add a new command-line action, copy_node_from_another_profile, which copies a node from one profile to another. This can be used, for instance, to copy a custom report from one profile to another.
  • [1282080] Restored the "show all rows" option in table reports (this was removed in version 8.6.0 as part of a UI redesign).
  • [1282781] Restored the check_main_table_integrity and check_itemnum_integrity command line actions, which can be used to do database integrity checking, and some repair.
  • [1282917] Added a new "skip file expression" option which provides a way to create a rule for skipping files in the log source based on a Salang expression. This allows for advanced skipping algorithms, for instance, skipping files where the date in the filename is older than 7 days.
  • [1282927] Added Media Reports snapon to SHOUTcast format.
  • [1283423] Added support for LUNA Insight Media Manager Service log format.
  • [1283596] Enhanced Wowza log format plug-in, so it shows stream names both hierarchically and non-hierarchically, in separate reports.
  • [1283619] Changed Wowza log format plug-in to use the new "play duration" snapon to compute its play duration field. This allows play duration to be computed more precisely in cases where log data is processed with multiple processors, or multiple log files processed out of chronological order, which previously would have resulted in small discrepancies in the reported duration.
  • [1283946] Improved the robustness of database updates, by performing some parts of the update off to the side of the main table, and moving them into place only if the update completes without an error. This eliminates MUINT_MAX errors which can occur from database corruption resulting from an earlier failed update.
  • [1284000] Renamed the "allow empty log source" option to "Warn on log source errors", since it has gradually acquired many other conditions other than just an empty log source. Also, added logging of these warnings to TaskLog, and to console output. They are also displayed in the Progress display.
  • [1284018] Added a new option, "Skip File Expression," which allows files in the log source to be skipped based on a custom Salang expression. This allows for advanced skipping, for instance, skipping any files older than 30 days, according to the timestamp embedded in their filename.
  • [1284105] Added support for WebLogic W3C format logs.
  • [1284136] Added support for formatting of a date/time timestamp report field as "date" or "time", showing only the date or time of the timestamp.
  • [1284208] Added Media Reports snapon to Microsoft Media Server format.
  • [1284236] Added integration support for Vision Reporter, a mobile reporting app ( http://www.visionreporter.com/ ).
  • [1284358] Added support for Nginx log data with a customer log_format string.
  • [1284837] Added new "Date" and "Time" display formats for timestsamp report fields, to display just the date or time portion, for instance to have separate Date and Time columns in Log Detail.
  • [1284963] Added Media Reports to the Akamai Streaming format.
  • [1285140] Added support for Courier POP3/IMAP log format.
  • [1285207] Improved detection of BlackBerry devices, for the Operating Systems and Web Browsers reports.
  • [1285429] Added support for columns of type "text" in ODBC log sources in MSSQL databases.
  • [1285687] Added a new Miscellaneous -> Active Filters Info page to Reports, where the command-line and "expression" versions of the current report filters can be seen.
  • [1286514] Added support for VARCHAR() fields in the result of database_sql_query().
  • [1287194] Added support for MDaeomon Routing log format.
Fehlerkorrekturen:
  • [1279136] A Pages report, with a Page field as a pivot, gives an error like, "Can't find tableAlias=rep_*, fieldName= in table rep_*"
  • [1283035] Clicking "Save as New Report" has no effect on the first click, when using Internet Explorer 8 (it works on the second click).
  • [1283229] If a profile uses an MSSQL database, the Create Profile Wizard will not allow a space in the profile name.
  • [1283766] Import through the web UI of a Sawmill 7 database with sessions may fail with an error like, "Attempt to read beyond end of {dbdirectory}\main\item s\day_of_week\offsets_by_num (fileSize=8000); attempted to read from 484293090593472512 to 484293090593472520"
  • [1283834] Attempting to generate a pie chart, with sort set to chronological, causes a crash.
  • [1284137] Adding a date/time timestamp field to a report other than Log Detail gives incorrect timestamps in 1970.
  • [1284176] Profiles created in 8.6.0 may give an error, "Unknown variable 'lang_admin.snapons.geoip.comment' in expression" when displaying the Config -> Snapons page.
  • [1284320] If a format has a numerical field named "requests," and if the field is unchecked during profile creation, a crash or an error like "Couldn't find node parameters in" will occur.
  • [1284815] After adding a Field Ratio snapon, all table reports fail with an error, "Internal Error: Empty node name"
  • [1284921] Sawmill's built-in HTTPS server supports SSLv2, an old and less secure version of the protocol. Switched to allowing only SSLv3.
  • [1284973] Changed the "Turn on cross reference groups" option in the Create Profile Wizard so, if unchecked, it turns off all xrefs except the first one (date/time). Previously, it turned them all off, but that could lead to reporting timeouts when displaying the first report, on very large datasets.
  • [1285043] Attaching the "Bounce Rate" snapon has no effect on reports.
  • [1285059] If a profiles is created from a plug-ins which uses snapons, any require_field conditions in its log filters are ignored--log filters are not deleted properly if the fields they require are not present. This can cause errors during log parsing. For instance, Flash Media Server profiles created from a log file lacking c-client-id will give an error on build, "Unknown variable 'c_client_id' in expression".
  • [1285137] In profiles which use distribute_format_line() to handle multiprocessor parsing of data with embedded format lines (e.g., Wowza), a small amount of log data *before* a format line may be parsed using the parsing rules specified in that format line, resulting in values being put into the wrong fields.
  • [1285138] Opening a report in Gmail or Outlook does not show the legend colors from a pie or bar chart.
  • [1285268] Fixed an issue where Wowza (and potentially Flash) log data would be reported with 0 duration when filtered. Also, improved memory usage of database filtering in Wowza and Flash import, and lifted restriction that Wowza and Flash data be processed chronologically and with a single processor.
  • [1285273] Checking "Prevent Use Of Previous Passwords" in Admin/Preferences/Password is not saved and may cause a javascript error.
  • [1285292] When the maximum number of licensed profiles is exceeded, and Reports is clicked for a profile, an ugly unformatted HTML error message is displayed.
  • [1285370] If a database update is attempted against a database which has never been built, it fails with the error, "Cannot build database for {profile}-- someone is already writing to it" (it should instead build the database).
  • [1286378] A "Send Report By Email" task, on a profile whose database is being updated, sends a report (or sometimes fails), rather than giving an error that the database is being written (as it should).
  • [1286440] The custom action dump_main_table gives an error like, "Attempt to read beyond end of LogAnalysisInfo/Databases/{profilename}/main/items/date_time/offsets_by_num (fileSize=8000); attempted to read from 9916758672 to 9916758680
  • [1287062] The filter "session start" still appears in the Report Filters menu, though this type of filter no longer applies to session analysis (and gives an error if you try to use it).
  • [1287173] The login page does not save the new entered password upon an expired password notification. Clicking the Login button has no effect.
  • [1287450] The date filter "last1week" selects 8 days (Sunday through Sunday) instead of 7 days (Sunday through Saturday).
  • [1287520] Sending email in reports does not show the error message if an error occurs.
  • [1287664] If a date range filter is used in a SQL database with a table prefix, it results in an error like, "Unable to Execute ODBC Query='select * from bottomleveldateitemnum'; diagnostics=ODBC error: rec1: SQLstate: S0002; msg=[Microsoft][ODBC SQL Server Driver][SQL Server]Invalid object name 'bottomleveldateitemnum'.;"
  • [1287864] Display format type "megabytes" and "gigabytes" were implemented in Salang but not available in the GUI.
  • [1287865] Reports show table bar graphs for very small numbers when they are expected to have zero length.
  • [1287867] Report and report element descriptions have wrong margins.
  • [1289203] Removed invalid reports editor "Show header bar" option in Reports Editor.

   Download    
Windows, Mac OS, Linux
  Preise | Kaufen
Ab 210 € (inkl. MwSt.)

Sawmill 8.6.1 (14.02.2013)

» Produktseite » Download » Onlineshop

Neue Funktionen:
  • [1277718] Modified the "Device Type" reports a bit, to show a Mobile Devices report listing only mobile devices, instead of a general Device Types report (the Device Categories report remains unchanged).
  • [1280054] Improved progress reporting while scanning a recursive log source, to show the directory being scanned.
  • [1280267] Added support for UTM 80-E Firewall.
  • [1280489] Improved database build performance slightly by removing the unnecessary xref on the session_sequence_number field.
  • [1280716] Added support for IIS Advanced Logging Module Log Format.
  • [1281737] Switched Apache Custom plug-in to use the Web Server Package, giving it the advanced functionality of the Web Server Package snapon, including a dashboard and advanced reporting of agent and referrer information.
  • [1281888] Added a Dashboard to the Media Reports snapon; added the Media Reports snapon to Flash Media Server.
  • [1282340] Added automatic conversion of incorrect but commonly attempted report syntax "fieldname = 'abc'" to the correct "fieldname within 'abc'"
  • [1282389] Added a Dashboard to all formats which use the Gateway Reports snapon (which is most major gateway log formats).
  • [1283929] Slightly enhanced the previously-seen-data skipping algorithm, so if a log file is zero length or inaccessible, and "skip files by pathname" is enabled, the file will be ignored, and not saved as "seen," so if it gets data later or becomes accessible, it will be processed at that point. This is specifically important for IIS logs, where the latest log (the log being written) is not accessible for reading, and should be retried until it becomes available.
Fehlerkorrekturen:
  • [1278183] If an LDAP password contains a apostrophe, it causes an error on login like, ""Sawmill Alert Syntax error: Unknown operator in expression."
  • [1278669] When the option Report Options -> Numbers & Text -> "Use base 10 for byte displays" is changed, the changes does affect for previously-generated (cached) reports.
  • [1280548] When building with multiple processors on 64-bit Windows, if an integer field value has a value more than about 2 billion, and it will be truncated to about 2 billion, even if the database field is specified as 64-bit.
  • [1280717] Reports filtered on a date range query the main table (resulting in slow report generation), even if a cross-reference table exists able to optimize the query.
  • [1281429] IIS profiles do not detect web browsers properly; in particular, they identify Internet Explorer as "Unknown Mozilla".
  • [1281632] The values are invisible in table cells in standard PDF reports.
  • [1281718] If, after making graph changes in the Reports Editor, you click "Save Changes", and then go to Manage fields and click OK, the graph changes are eliminated.
  • [1281797] The Scheduler gives an error, "Unknown variable 'lang_admin.snapons.device_type.report_label'", when there are profiles created in 8.5.9, which use the Web Server Package.
  • [1281861] Large table reports (e.g., a Hostnames report with a million rows) use a very large amount of memory, and if large enough, eventually fail with an error like, 'Unable to allocate 469762048 bytes of memory; maximum memory is 2242822425, but 2098194845 is already used, and no further memory can be freed. Allocation attempted at fstring.cpp:225, description: "fstring buffer"'
  • [1281968] Temporary tables with names starting with blitmp and join_maptable, are never removed from the database; large numbers of these can collect over time, until the database is rebuilt.
  • [1282110] When running a "remove database data" operation against a profile which uses a MySQL 4 database as a bank end, an error can occur like, ''SQL query failed: 'delete from main_table using main_table x where (main_table.date_time < '2012-01-06 21:59:37')' error=Unknown table 'main_table' in MULTI DELETE at ../src/expire_database.cpp:212''
  • [1282133] View an Overview report for a profile with no data in its database, gives an error: 'Attempt to read beyond end of LogAnalysisInfo/Databases//main/Tables//data.tbl (fileSize=0); attempted to read from 0 to 48'
  • [1282143] Enhanced support for NetScreen, to extract virus information from a slight variant of the format, and to simplify the "message" field to improve performance and reduce database size.
  • [1283027] The "gear" and "save report" icons in report elements, do not render in the correct places when viewing reports in Internet Explorer 7.
  • [1283039] When clicking "Save as new report" in Reports, a JavaScript error can occur, causing the window not to load. (Clicking again will load the window).
  • [1283040] There was a "pie chart" option for chronological graphs, in the "customize report" window in Reports, even though chronological data cannot be graphed as a pie. This caused an error when it was selected. This option has been removed.

   Download    
Windows, Mac OS, Linux
  Preise | Kaufen
Ab 210 € (inkl. MwSt.)

Sawmill 8.6.0.2 (13.12.20129

» Produktseite » Download » Onlineshop

Neue Funktionen:
  • [1272161] itemnum tables are no longer indexed, when the corresponding database field is set to not be indexed.
  • [1273614] Separately implemented country/region/city support as a snapon, for better modularity; this also makes it possible to have more than one Geo analysis in a single profile (based on different IP fields).
  • [1274335] Greatly improved the performance of filtered Log Detail reports, by eliminating the calculation and display of the total available rows. This decreases the time from 169 seconds to 7 seconds in one 180-million-line dataset.
  • [1274617] Created a new snapon, Create Default Xref Groups, which at the time it is attached, creates default xref groups for all database fields (each xref group having that field, date/time, and all aggregating fields), and all reports (each xref group having all fields in the report). This is similar to what has happened automatically at profile creation, in earlier versions, but it is now possible to reset the xrefs to optimal configuration after adding or removing fields or reports.
  • [1274618] Log Detail is now ordered automatically with the timestamp at the left, followed by the non-aggregating fields in the order they appear in the Report Fields, followed by the aggregating fields in the order they appear in Report Fields. In previous versions, all fields were in Report Fields order, which can give undesirable orderings, especially when some fields are created with snapons.
  • [1275211] Added error message display when JavaScript is disabled.
  • [1275333] Added a white line between adjacent slices in 2D pie charts, for better contrast.
  • [1275344] Enhanced LDAP login plug-in so user roles and profile permissions can be managed through the Sawmill web interface, and will not be overwritten each time by the LDAP login.
  • [1277169] Added support for McAfee Web Gateway log format.
  • [1277726] The Countries/Regions/Cities reports have been somewhat restructured, when they are created from a snapon (as is currently the case for Apache logs, Common Access Log Format, and IIS logs; more will follow). The reports no longer use a hierarchy, but instead use custom fields with custom formatting, which give a cleaner and easier-to-read appearance to the names of the regions and cities. Some city and region categories have also been consolidated.
  • [1277785] Added support for Sonicwall NSA (Network Security Appliance) log format.
  • [1277837] Added support for Smoothwall Network Guardian and Advanced Firewall log format.
  • [1278135] Added support for IceCast Playlist log format.
  • [1278289] Added a snapon to report Service Name, e.g., "HTTP" computed from port 80, protocol TCP.
  • [1278764] Improved progress reporting to show "scanning log source" as a separate stage after "erasing database."
  • [1278851] Added support for Websense log format.
  • [1278870] Enhanced support for Microsoft DHCP log format, to handle non-syslog version, and missing field values in some fields.
  • [1279121] Added the option to build all database field hierarchies from the command line with "-a rdh" by omitting the -fn parameter.
  • [1280817] Added Dashboard functionality. This is a collection of features—side-by-side report elements that flow and wrap to maximize visible data, simpler and smaller versions of reports and graphs, and a number of other report element options—which can be used to implement simple "dashboard" style reports with many small graphs or tables in a two-dimensional layout. Used this functionality in the Web Server Package snapon to implement a Dashboard for Apache Combined, IIS, and Common Access log formats (more to come).
  • [1280820] Enhanced reporting of Web Browser information, for plug-ins that use Web Server Package (currently, IIS, Apache Combined, and Common Access). The new report shows browser name, major version, and full browser version in three separate report elements in one report.
  • [1280821] Cleaned up and improved the appearance of reports and graphs in a variety of small ways.

   Download    
Windows, Mac OS, Linux
  Preise | Kaufen
Ab 210 € (inkl. MwSt.)

Version 8.5.9.1, 05.08.2012

» Produktseite » Download » Onlineshop

Neue Funktionen:
  • [1270711] Added a Custom tab to the Date Picker in Reports, to allow direct entry of date filter expressions like "last 3 months", "Jan/2012-Mar/2013", etc.
  • [1271248] Added a new Device Type report to the main Apache plug-in and the IIS W3C web server plug-in. This report will be migrated to other web server plug-ins in the future.
  • [1271352] Added support for vsftpd log format.
  • [1272385] Added support for Juniper Media Flow Controller Access (W3C) Log Format.
  • [1272450] Improved performance of reports run against the main table (i.e., without a cross-reference), where all non-aggregating fields are "flat" (i.e., all items are directly below the root in the subitems hierarchy). Most simple fields are like that, so this improves the performance of most non-xreffed reports. Performance is vastly improved over Sawmill 8.5.8 (10x-20x or more), but since Sawmill 8.5.8 had a serious performance regression for this type of reports, performance improvement is less impressive vs. 8.5.7 and earlier (maybe 1.5x).
  • [1273050] Added support for DansGuardian logged through a syslog server.
  • [1273057] Added support for McAfee Email Gateway log format.
  • [1273788] There is now an option to omit the total row (subtotal row) beneath each subtable in a Pivot Table.
Fehlerkorrekturen:
  • [1267884] When building a database larger than about 4GB, on 32-bit Windows, an error will occur, like, "Internal: Error in PagingCachingBuffer [LogAnalysisInfo\\Databases\\{profile}\\main\\Tables\\main_table\\data.tbl]: position=4295016444, but pi.endOffset=49152"
  • [1268490] When building or updating a database, an error can occur, "Internal: SQLQueryEditorTable::PageForward() called, but queryDone=true"
  • [1268944] Table Filter expressions on the Log Detail report, are not saved to the profile, if edited in Config.
  • [1271373] If a report has a report date filter and one or more report elements had also a report element date filter, extra empty bars can appear in date bar graphs.
  • [1272026] If a database build is cancelled or failed, attempts to access the reports will fail with an error like, "Unable to read file LogAnalysisInfo/Databases/{profile}/main/Tables/xref30/header.cfg", instead of rebuilding the database as they should.
  • [1272083] If a database name contains a space, it causes an error when creating a MySQL profile.
  • [1272199] If a profile has two xrefs with the same fields, and one of them is hierarchical and the other is not, the Overview may over-report the number of events.
  • [1272374] If a report query requires a full scan of the main table, for a profile created with Sawmill 8.5.8, "event" field values will be truncated to values between -127 and +128. (Workaround: change the "Single value integer bits" parameter for the events database field to 64, and rebuild the database).
  • [1272530] When a number_of_rows option is specified for a report in a plug-in, it has no effect on the created profile.
  • [1272638] When a version 7 profile is imported into version 8.5.8 and then converted, the name of the "Year" report is missing from the report menu.
  • [1272768] The main table indices are dropped during database update, for profiles with complex database filters which edit the main table (e.g., Wowza, and also any profile with Sessions), resulting in a slower report (as one index is built) the next time a filter is used on a report which cannot be delivered by cross-references.
  • [1272782] When building a MySQL database, temporary memory usage can grow without bound, eventually (for a large dataset) causing an error stating that no further memory could be freed. The console also will show messages like, "#### WARNING: PROBABLE MEMORY LEAK; WE NOW HAVE 100 TEMP STRING POOLS".
  • [1272924] While creating a profile with the tomcat_pattern plug-in (Apache Tomcat (using Access Log Valve pattern)), an error occurs, "Couldn't find node tomcat_pattern in language.english.lang_stats.field_labels"
  • [1272927] If there is no data in the log source on rebuild, reports will fail with an error (instead of reporting all 0s) like, "Unable to read file LogAnalysisInfo/Databases/tomcat/main/Tables/xref1/header.cfg (Operation timed out)"
  • [1272988] When creating a profile from either of the non-W3C IronPort S-Series Access Log formats, an error occurs, "Error in profile_setup add_custom_report_element(), the report element type 'session_pages' is not supported."
  • [1273000] If an FTP log source uses a relative pathname like "stats/logs", it will not find the log files, and will generate an error when creating the profile or building the database.
  • [1273312] Wowza reports may have the field values shifted (the value from the 25th field of the log data appearing in the 24th field, for instance), if there is a c_user_agent field.
  • [1273403] Fixed a bug where Flash Media Server profiles from log data without a cs-uri-stem field fail to build with an error, "Syntax error: Unknown variable 'cs_uri_stem' in expression"
  • [1273763] When the cs-stream-bytes or sc-stream-bytes snapon instances are attached to a Wowza profile, on a 32-bit system, the resulting fields are only 32-bit, and will overflow into negative numbers for values > 4GB. (Workaround: change the database field integer bits to 64 for those fields)


Version 8.5.8.1, 28.06.2012

» Produktseite » Download » Onlineshop

Fehlerkorrekturen:
  • [1271315] The uninstaller does not properly shut down existing Sawmill.exe processes on Windows. This can cause a "version mismatch" error when upgrading from 8.5.7 to later versions. The workaround is to manually kill both Sawmill.exe processes (one will automatically restart if you kill it, but will exit if you kill the other), and rerun the installer.
  • [1271762] Profiles are created with skip_previously_seen_data_on_update option set to false by default, which causes previously-seen data to be re-added on updates, in a default profile.


Version 8.5.7.3, 12.06.2012

» Produktseite » Download » Onlineshop

Neue Funktionen:
  • [321927] Added support for Kerio Connect 7 logs. Previous versions supported only Keri Mail Server through versions 6.5. The new version also reports separately on SMTP, HTTP, and WebDAV events, reports usernames when available, and reports SSL status.
  • [1261075] Added rotation of the tagging server log file, and moved it to a subdirectory LogAnalysisInfo/logs/tagging.
  • [1261253] Added support for conditions in snapon parameters, so when attaching a snapon, certain parameters can appear or disappear depending on the values of other parameters. Used this to implement a better Aggregating Field snapon, which prompts for the source field when the aggregation operator is "unique", or prompts for a log filter or database filter expression otherwise.
  • [1262435] Added an "index granularity" option for database fields, which specifies the precision of the indexing of database fields in the main table. Previous versions had a default of 0, resulting in highly precise indices; the new default is 1000, which provides only general regional indexing of the table. With the new value, indices are 10x smaller or more, and index builds are as much as 5x faster. However, filtered reports can be as much as 50% slower, if a cross-reference table is not available to provide the report.
  • [1263556] Changed internal database deletion so it deletes only the "main" subdirectory of the database directory, rather than the entire database directory. This prevents an occasional issue which could cause data loss if the database directory was set to an existing directory with other data (like the log source directory).
  • [1265556] Reduced database disk usage by about 50% in most cases, by using smaller integers when reasonable.
  • [1266416] Enhanced Wowza analysis to include new Media Usage reports for a simple top-level view of usage. Also added referrer tracing with search engine and search phrases analysis. Improved grouping of reports menu, and removed a few extraneous fields for better performance.
  • [1266466] Improved performance of command-line index building (-a rdi) by building all indices in a single pass through the main table (which is how it works during a database build already). This can make the index builds 10x faster or more, when rebuilding all indices from the command line.
  • [1268454] Added support for Cisco NetFlow logs, created with "nfdump -o long"
  • [1268470] Implemented Mail Server Reports snapon, with general reports appropriate to mail servers: Sender Domains, Recipient Domains, Senders, Recipients, Recipients by Sender. Added this snapon to the Postfix plug-in.
  • [1269005] Added support for Akamai HTTP Streaming Log Format.
  • [1269200] Added a built-in Salang function, dns_resolve_hostname_to_ip_address(), for resolving hostnames to IP addresses.
Fehlerkorrekturen:
  • [1258482] Certain large datasets can crash during the database filtering step of a database build.
  • [1261954] Conversion of a Sawmill 7 database files with an empty error; conversion of a Sawmill 7 profile seems to succeed, but gives an error on viewing reports.
  • [1264206] When using SFTP to process files compressed with bzip2, an error can occur like, "SSH connection failed: read_packet(): Packet len too high(1608634376 5fe1d008)"
  • [1264277] If a custom report field uses another report field to calculate its value, and that report field is not a visible column in the report, it will give an error like, "Unknown column 'accesses' in cell_by_name()."
  • [1264861] Fixed a bug where conversion of a MSSQL Sawmill 8.1 profile to 8.5 fails with an error like, "Unable to Execute ODBC Query='create table main_table_plus_dfc select loadorder, db_filters_computed, ... from main_table'; diagnostics=ODBC error: rec1: SQLstate: 37000; msg=[Microsoft][ODBC SQL Server Driver][SQL Server]Incorrect syntax near the keyword 'select'.;"
  • [1265145] A remove database data operation on a MySQL 5.5 database, gives an error like, SQL query failed: delete from main_table using main_table x
  • [1265527] Reports can fail to generate, with an error, "Unknown variable 'lang_stats.general.' in expression."
  • [1266068] Reports sorted by "string" columns can crash in some circumstances.
  • [1266187] CSV export from the Scheduler, when "all rows" is specified, exports only one row.
  • [1266371] When using multiple SFTP log sources, database updates can skip an entire log source, if some data in the previous log source has already been imported.
  • [1266544] When viewing an unfiltered Log Detail report, paging forward changes the line numbers, but not the data displayed.
  • [1266546] In FTP or SFTP log sources, if the pathname ends with a /, no files will be selected.
  • [1267210] When an unqualified hostname is used in a URL to access the Sawmill web interface, the error message displayed states that there was error while trying to display an error. There should be an error; but it should state that hostnames must be fully qualified.
  • [1267261] The new report field option "Skip Escaping" is on by default, which can cause an error, "Syntax error: Unknown operator in expression," while displaying reports containing literal $s and other special characters.
  • [1267732] Attaching the "Gateway Reports" from the Snapons page gives an error, "Unknown variable 'lang_admin.snapons.gateway_reports.parameters.have_client_ip_field.form_element_label' in expression"
  • [1267856] Building the database of a profile using Nortel ACD format causes an error, "#### Internal: Attempt to find main table column number from database field 19 [average_tsf], but there is no such column in main_table"
  • [1268317] Per-user report filters have no effect.
  • [1268763] If an 8.1 profile has a "unique" database field pointing to a database field which doesn't exist, the converted 8.5 profile will give an error like, "Unknown database field 'cs_cookie' as source field of database field 'visitors'".
  • [1268972] If all log sources are disabled, a database build can crash.
  • [1269054] Large MySQL database builds, and other operations, can use large amounts of memory (more than permitted by the Preferences).
  • [1270484] When using an external SQL database, if all xref and indices are turned off for a profile, the main table will not be populated (or only 1000 lines of it).


Version 8.5.6.3, 23.03.2012

» Produktseite » Download » Onlineshop

Neue Funktionen:
  • [1102604] Added support for arbitrary (almost) Log4J parsing, through support for most PatternLayout values.
  • [1256999] Improved reporting performance has been improved for large reports with "omit parenthesized items" turned on (an example of this is a standard web server "search engines" report). In one example (200 million line dataset), reporting performance increased 24x.
  • [1258492] Added support for Clavister SG log format.
  • [1258816] Added support for a variant of GroupWise Post Office Agent Log Format, which logs Net Id.
  • [1259024] Added a new snapon, "Top Level Domain" which creates a "top level domain" field, and populates it with a log filter, using the list of known top- and -second-level domains to convert a URL to a reasonable top domain name, e.g., "abc.xyz.com" becomes "xyz.com" and "abc.xyz.co.de" becomes "xyz.co.de".
  • [1259026] Added a new snapon, "Gateway Reports" which creates a category of four simple reports for gateway decides, for HR purposes: Users Summary, Categories Summary, Domains summary (using the new Domains field snapon), and Usage Detail. The Summary reports include pie charts, and the Usage Detail reports shows category, user, site, start and end time, and duration. This this snapon is attached by default to Palo Alto Integrated, and Squid (without category); other formats will follow.
  • [1259220] Greatly improved performance of report generation, for reports containing fields using custom expressions, including "average" fields (e.g., page views per session). Reports using this kind of field, and containing millions of rows, generate as much as 100x faster now. (Reports with few rows are not much affected).
  • [1259630] Improved performance of database builds of the internal database, especially multiprocessor builds and profiles without database filters (e.g., profiles without session analysis, or other snapon functionality which creates a database filter). Performance improvements vary by profile, but may be 40%-100% faster than previously, on a multiprocessor system.
  • [1259704] Added back support for the rebuild_cross_reference_tables action, which allows all xrefs, or any single xref (with -crt N) to be rebuilt from the command line, without rebuilding all the rest of database filters, or indices.
  • [1259821] Added support for numerical reporting of the content_bytes (%B) field, in Apache Custom format strings.
  • [1259842] Improved cleanup of Sawmill's "recycling bin" (LogAnalysisInfo\TemporaryFiles\DeleteMe), by immediately deleting everything put in it (simultaneously with whatever else is going on), rather than waiting for the next cleanup cycle. This can make a huge different in the amount of disk space temporarily used during certain operations, especially 8.1 profile conversion.
  • [1260326] Add a new clean_up_database action (e.g. sawmill -p {profile} -a cud), which drops all temporary tables from the database (except those whose parent process is still running). This also now occurs automatically at the beginning of any database update, or "remove database data." This eliminates the clutter which sometimes results when reports or other processes terminate abnormally, and fail to clean up their temporary tables.
  • [1260480] Added functionality to include multiple log filter initializations, and multiple log filter finalizations, in a single profile (as subnodes of log.filter_initialization and log.filter_finalization). They are run in order. Old-style initializations and finalizations (expressions directly on log.filter_initialization, etc.) are still supported. Added a new snapon operation to add a filter initialization or finalization to a profile. Together, these features allow snapons to add independent filter initializations and finalizations to a profile.
  • [1260482] Implemented the "Advanced Example: Rejecting spiders based on JS and /robots.txt access" log filter example as a snapon, for much easier implementation in a profile.
  • [1261082] Added a new action, rebuild_database_filters, which rebuilds all database filters.
  • [1262382] Enhanced Wowza analysis to use the new concurrency snapon to track concurrent streams, instead of the older "session" style analysis.
  • [1264537] Added support for Microsoft Forefront log format.
Fehlerkorrekturen:
  • [1250051] When parsing very large datasets (billions of lines) with multiple processors, an error can occur during log parsing, "Invalid format of PARSED response from parsing server."
  • [1256945] Sawmill 8.1 profiles which include "session entrances" or "session exits" as report element columns do not convert properly; the resulting profile will give an error like, '"The report field "ssession_entrances" does not exist in columns of report element "year"' in the Report Editor.
  • [1257518] On Windows, if a LogAnalysisInfo has been moved using LogAnalysisInfoDirLoc, the upgrade installer installs the latest version in the default location, rather than in the version specified by LogAnalysisInfoDirLoc.
  • [1257840] If there is only one row in the database (typically, because there is only one line in the log data), viewing reports after a rebuild will give an error, "#### Unable to read file LogAnalysisInfo/Databases/apacheextended/main/Tables/xref0/header.cfg (Operation timed out)"
  • [1258384] When mapping a drive or share through the Network Disks section of the File Browser, the disk does not immediately appear after being mapped.
  • [1258619] After about 2 billion lines processed, the progress display shows the number of line processed as a negative number
  • [1258808] If a report field is added by a snapon at profile creation time, and its display format is not "integer," it is overridden by profile creation to be an "integer" display field.
  • [1258809] On Windows, if a custom report field displays as "integer," and contains a value larger than about 2 billion, it will display as about 2 billion in HTML reports.
  • [1259019] If a syslog-required field has a database field called "duration," the Log Fields Editor shows a blank field label.
  • [1259034] After a Remove Database Data operation, the Calendar report still shows links for days that have been removed.
  • [1259120] The "concurrent connections" snapon (used to do concurrent connection analysis for several media server plug-ins, including Microsoft Media Server, can overcount concurrent connections in some cases, as it fails to register the end of certain connections. These errors tend to accumulate as more lines are processed, so the number of concurrent connections will incorrectly slow a gradual upward slope.
  • [1259396] Fixed a bug where, if using a SQL table prefix or suffix, a Date Range filter would fail with an error like, "SQL query failed: 'select * from bottomleveldateitemnum' error=Table '.bottomleveldateitemnum' doesn't exist"
  • [1260066] If the "Log field separator" is a tab, the Config -> Log Processing -> Format page will show an error if you make a change to it, "No value. Please define a value."
  • [1260232] Sending mail to a qpsmtpd server, using username/password authentication, gives an error, "503 AUTH not defined for HELO."
  • [1260425] When a version 8.1 profile has a "session begin" or "session end" column in a report, and it is converted to 8.5 format, the Report Editor gives an error like, 'The report field "ssession_begin" does not exist in columns of report element "year".'
  • [1260484] Viewing Log Detail with a filter which discards all events gives an error like, "Attempt to read beyond end of LogAnalysisInfo/Databases/{profile}/main/Tables/rep_9a7ada7d8bbfe1830f4751a689e58504/data.tbl (fileSize=0); attempted to read from 0 to 280"
  • [1260610] Fixed a bug where the Log4j parser did not properly handle %d dates without a curly-bracket format, in PatternLayout (and rejected all entries).
  • [1261320] When using an Oracle database, the Log Detail report gives an error like, "Unable to Execute ODBC Query='select x.broken_link, x.date_time, x.day_of_week, x.hour_of_day, x.s_ip, x.cs_method, x.cs_uri_stem, x.cs_uri_stem, x.file_type, x.screen_dimensions, x.screen_depth, x.worm, x.s_port, x.cs_username, x.c_ip, x.domain_description, x.location, x.organization, x.domain, x.isp, x.web_browser, x.operating_system, x.spider, x.sc_status, x.sc_substatus, x.sc_win32_status, x.hits, x.page_views, x.time_taken, x.time_taken, x.session_entrances, x.session_duration, x.bounces from main_table xrownum between 1 AND 50'; diagnostics=ODBC error: rec1: SQLstate: S1000; msg=[Oracle][ODBC][Ora]ORA-00933: SQL command not properly ended ;"
  • [1261498] Flash Media Server profiles do not report concurrent connections.
  • [1262050] When using an FTP or SFTP log source on Windows, if the log file or pathname contains a colon (:), it gives an error like, "Unable to create folder LogAnalysisInfo\TempLogs\1330129826\7768\directory\\subdir:with:colon"
  • [1262299] When using "-a pv" to display database fields summaries from the command line, max/min fields based on date_time display values from 1970.
  • [1262381] Temporary tables with names like xref0_update are not properly delete when the database is built, making the database about 25% larger than it needs to be.
  • [1262595] If a relative date filter is used which selects just one day, on a Days report with a graph, it will give an error, "#### Unknown variable 'lang_stats.months_short.e_t' in expression". If it is used on a Months report with a graph, it will give an error, "#### Couldn't find node 0 in volatile.temp_month"
  • [1262794] Enhanced (and in some cases fixed) memory management, to better limit memory usage. The previous version generally kept its memory usage under control (under the specified limit), but certain types of memory usage were not counted toward the limit, which could result in substantially higher memory usage than allowed.
  • [1262847] The Create Profile Wizard does not prompt for the Access Log Valve pattern, when creating a profile using the format, "Tomcat (using Access Log Valve pattern)"
  • [1263906] If LogAnalysisInfo is relocated using LogAnalysisInfoDirLoc on Windows, the service will not properly shut down Sawmill.exe processes when it stops.
  • [1264170] Create a new report element "Hour of day" with "Display: Graphs". On tab Graph Options change the graph type to "Line graphs". On tab Graphs change sort by to "Hour of day", keep sort direction "Ascending". Click save changes and view the report. The report will show the graph with sort_direction "descending" although the report element editor indicates "ascending".
  • [1264241] When using MySQL or MSSQL as the back-end database server, if the database already exists and is already a Sawmill database, and if the profile uses the sessions snapon, an error will occur on profile creation, "Duplicate column name 'session_id'".


Version 8.5.5.1, 18.01.2012

» Produktseite » Download » Onlineshop

Neue Funktionen:
  • [916304] Added support for Amazon Cloudfront Streaming logs, including a database filter which emulates Amazon's own "bytes transferred" calculation.
  • [1052024] Enhanced the Coradiant TrueSight log format support, to handle variable field lists in the header, to report on all known numerical fields, and to categorize all known non-numerical field reports.
  • [1218318] Added a new "Execute command line" action to the Scheduler, to run an arbitrary command line.
  • [1256677] Added a performance warning to the Progress display, when a particularly complex normalized database field is detected during database building.
  • [1257003] Added an xref for each report, by default (with no date range info). This can significantly improve the performance of unfiltered top-level reports, and especially the Single-Page Summary.
  • [1257026] Improved the selection of the xref table used for a query, so the smallest (fastest) match is chosen, rather than the first match. This improves the performance of some unfiltered, or date-filtered, reports.
Fehlerkorrekturen:
  • [948006] Removing data from an Oracle database using a filter gives an error like, "#### Unable to Execute ODBC Query='delete from main_table x where not (filtertmp_3932_0.itemnum IS NULL)'; diagnostics=ODBC error: rec1: SQLstate: S0022; msg=[Oracle][ODBC][Ora]ORA-00904: "FILTERTMP_3932_0"."ITEMNUM": invalid identifier"
  • [1244697] Duration fields are incorrect for Wowza Media Server profiles created with Sawmill 8.5.3 or 8.5.4.
  • [1246049] Reports, especially for a database which hasn't been rebuilt for a long time, can fail with an error like, "Attempt to read beyond end of LogAnalysisInfo/Databases/{profile}/main/Tables/_select_result_75103_1/sets/visitors/header.dat (fileSize=0); attempted to read from 0 to 64."
  • [1256046] When using a MS SQL database with Palo Alto log data, the Sessions Overview gives an error like, "select count(distinct x.user), sum(x.page_views), max(x.date_time), min(x.date_time), count(distinct x.session_id), sum(x.session_duration) from main_table x where 1=1'; diagnostics=ODBC error: rec1: SQLstate: 37000; msg=[Microsoft][ODBC SQL Server Driver][SQL Server]Incorrect syntax near the keyword 'user"
  • [1256170] The "Maximum caching buffer memory full load" field is empty, in the Config UI.
  • [1256189] If there is a database field which has a different source than itself (e.g., a unique field like "visitors" which counts another field), database export will fail with an error like, "Can't find tableAlias=, fieldName=visitors in table main_table."
  • [1256296] Non-root-admin users cannot change their password; the "Save Changes" button has no effect.
  • [1256368] A license installation with sublicense only allows the number of profiles specified by the main license.
  • [1256450] Report fields which compute an average value of a field (x/y), show 0.
  • [1256501] When using a MS SQL database with a 64-bit integer field, aggregated numbers larger than about 2 billion can cause an overflow error which terminates the build.
  • [1256506] The delete_database_field action does not delete columns from report table (and report tables themselves) which are derived from the field, e.g., the "city" column and table are not deleted when the "location" field is deleted.
  • [1256517] An unfiltered Log Detail report takes a long time to generate (scans the whole main table, instead of just the visible rows).
  • [1256528] Some temporary tables are not removed from internal databases, especially during filtered report generation, resulting in a large number of unnecessary database tables (and unnecessary files on disk) after a long period with many reports generated.
  • [1256952] Profiles created from the Juniper Networks Secure Access 4000/6000 plug-in give an error when reports are displayed: 'Unknown configuration group "session_paths" in node "profiles.in.statistics.reports"'
  • [1257001] Fixed an issue with the performance of some queries, which made reports slow with large datasets.
  • [1257002] Fixed a bug which could cause a crash on database build, if there were more cross-reference groups than database fields.
  • [1257516] If a Sawmill 8.1 profile has a custom "session user" field (session visitor ID), and that field has no corresponding report field, the profile when converted to 8.5 will fail to generate the Individual Sessions report with the error, 'The report field {customfield} does not exist in columns of report element "individual_sessions".'
  • [1257752] PIX logs with high hit-cnt values can take a very long time to process, or even fail with an error like, "Unexpected response from SPS server: PARSED 43969360 289230 0 0"


Version 8.5.4.1, 12.12.2011

» Produktseite » Download » Onlineshop

Fehlerkorrekturen:
  • [1243631] Generating a Sessions Overview for a dataset with no session events gives an error, "Internal error: mapping 'LogAnalysisInfo/Databases/{profile}/main/Tables/session_users_stage1/sets/sessions' read-only, but its lists.dat (LogAnalysisInfo/Databases/{profile}/main/Tables/session_users_stage1/sets/sessions/lists.dat) does not exist"
  • [1246830] Converting a v8 profile whose name contains a dot, gives an error, 'Unknown configuration group "options" in node "profiles.{profilename}.database"'
  • [1247484] If no -er (ending_row) is specified for a get_report action, it defaults to 0, which shows just one row (it should really show ten).
  • [1252329] On Window, if an index (or certain other database files) exceeds 2GB, it can grow without bound, causing the disk to fill and the database build to fail. This typically happens with large datasets, of 200 million lines or more, but it can happen with certain smaller ones.
  • [1256100] For certain (uncommon) large datasets, on Windows, a database build can crash during database filtering.
  • [1256165] Filtering reports, especially on single days, sometimes gives an error like, "Attempt to read beyond end of LogAnalysisInfo\Databases\{profile}\main\Tables\filtertmp_5676_1\data.tbl (fileSize=4); attempted to read from 882531391810568340 to 882531391810568344."


Version 8.5.3, 21.11.2011

» Produktseite » Download » Onlineshop

Neue Funktionen:
  • [1191655] Support has been added for the Mikrotik Web Proxy log format.
Fehlerkorrekturen:
  • [1189781] Bug reports always go to support@sawmill.net, even if Support Email is set to something different in lang_stats or Preferences.
  • [1192538] When using real-time reporting with multiprocessor parsing and the internal database, the reports do not show the latest data.
  • [1201875] Setting the thousands divider, or the decimal divider, in the user's settings, as no effect in reports.
  • [1217367] Adding a new license to an already licensed installation gives an error, "Unknown operator in expression."
  • [1218812] Filtered reports which cannot use xrefs, do not take advantage of database indices, resulting in report generation time linear with the size of the database. This makes some reports, especially those filtered on an item with few associated events, much slower than they could be. With this enhancement/fix, these reports are now 30x-50x faster for a 10 million row dataset, and will be proportionally even faster (or rather, were proportionally slower), for larger datasets.


Version 8.5.2.2, 31.10.2011

» Produktseite » Download » Onlineshop

Neue Funktionen:
  • [989079] Restored Message ID report to Barracuda Spam Firewall plug-in. This is to help correlate messages.
  • [1149070] Added RBAC privileges for access to network actions, so non-root-administrative user credentials can now be supplied to execute network actions.
  • [1171241] Added detection and reporting of Android user-agents in the Operating Systems report.
  • [1183330] Added support for IDP events from JunOS 11.1 with IDP to the Juniper SRX240/SRX3400 plug-in. Some field names are also improved.
Fehlerkorrekturen:
  • [1140085] Pages ending with "{default}" are not correctly converted/translated to "(default page)" for W3C data.
  • [1151672] Some images, including graphs, are broken in CGI-mode reports.
  • [1156230] For very large or complex datasets, on machines without a lot of memory, database builds can hang during the "Running database filters" step.
  • [1160752] When a session times out, a popup window appears with an technical message about the session timeout.
  • [1160874] An error (otherwise harmless) is written to TaskLog any time the login page is displayed: "Unknown variable 'volatile.session_id' in expression."
  • [1161680] Temporary files in the folder LogAnalysisInfo\Locks are never removed.
  • [1166248] Conversion of 8.1 profiles fails if they have a session_id or session_duration field unrelated to the main session analysis, and if they also have a main session analysis. E.g., Flash profiles are like this. The conversion fails with the error, "Snapon attempted to add database field 'session_id', which already exists."
  • [1166466] The header for the default "X by Y" reports doesn't include the name of the first field.
  • [1167221] Clicking "Lookup Pages" in the "Paths Through A Page" report gives an error, "Unknown variable 'v.fp.report_name' in expression."
  • [1174513] If a log format plug-in contains both a database field called "session_id" and a session analysis, profile creation fails with an error, "Snapon attempted to add database field 'session_id', which already exists."
  • [1176829] In certain unusual cases (with the report field node contains a database_field subnode which is empty), upgrading an 8.1 profile to 8.5 will fail with an error, "Internal Error: Empty node name."
  • [1177407] Zooming on a table item, and zooming to Log Detail, when using an Oracle database, gives an error like, "Unable to Execute ODBC Query='select x.date_time, x.day_of_week, x.hour_of_day, x.hit_type, x.page, x.file_type, x.worm, x.screen_dimensions, x.screen_depth, x.hostname, x.domain_description, x.location, x.organization, x.isp, x.domain, x.referrer, x.referrer_description, x.search_engine, x.search_phrase, x.web_browser, x.operating_system, x.spider, x.server_domain, x.authenticated_user, x.server_response, x.hits, x.page_views, x.spiders, x.worms, x.errors, x.broken_links, x.screen_info_hits, x."size", x.session_entrances, x.session_duration from main_table x left join filtertmp_3176_0 on x.hit_type = filtertmp_3176_0.itemnum where not (filtertmp_3176_0.itemnum IS NULL) WHERE rownum between 1 AND 50'; diagnostics=ODBC error: rec1: SQLstate: S1000; msg=[Oracle][ODBC][Ora]ORA-00933: SQL command not properly ended"
  • [1186397] The command line filters, -df and -f, have no effect when used with the get_report action.
  • [1192563] Log Detail reports, especially unfiltered Log Detail reports on large datasets, are much slower and more expensive (in disk space and memory) than they should be (due to a bug in sorting).
  • [1193475] Integer fields with values larger than about 2 billion, may be sorted incorrectly in report tables.
  • [1196107] Exported individual sessions show session begin and session end in epoch.
  • [1204456] Building a database with MS SQL and BULK INSERT gives an error like, "Bulk load data conversion error (type mismatch or invalid character for the specified codepage) for row 5, column 37 (session_id)."
  • [1205209] Clicking on Change Trial Mode, Admin or About hides the main page. Clicking on Support or Help opens the respective page in a new window and the current window.


Version 8.5.1.1, 06.09.2011

» Produktseite » Download » Onlineshop

Neue Funktionen:
  • [1135664] Added a Subjects report and parsing of the email subject from lines with Subject: and subject= to the Postfix Mail Server plug-in.
  • [861054] Language, Thousands divider, and Decimal divider, are all now per-user options, and editable in Admin -> Settings.
  • [1028838] Enhanced the Create Profile Wizard to allow plug-ins to prompt for snapon parameters at profile creation time.
  • [1135664] Added a Subjects report and parsing of the email subject from lines with Subject: and subject= to the Postfix Mail Server plug-in.
Fehlerkorrekturen:
  • [1007266] Various counts in the Postfix Mail Server or Brightmail Gateway plug-in, such as "Messages blocked" were being counted for each recipient, inflating the count.
  • [1115018] The Sessions snapon is always installed with a timeout of 1800, even when the log format plug-in has a different timeout. Also, the Sessions snapon does not recognize "logout" events.
  • [1117001] When using MS SQL as the back-end database, and using bulk_insert as the insert mode, and using a wildcard report filter, report generation gives an error like, "BULK INSERT filtertmp_5852_0 FROM 'C:\LoadDataDirectory\results.aec.gov.au.2011.to.2012\sql_load_data_5852_seq0.tsv"
  • [1134950] On Mac OS, the Sawmill logo and and Use Sawmill window graphic are out of date.
  • [1136138] Network action accesses give an error, "Syntax error: Unknown variable 'action_fail' in expression"
  • [1137776] The "upgrade these 8.1 profiles to 8.5" text does not appear, when using Internet Explorer 6.
  • [1139624] A bug report submission can fail on 32-bit systems, given an error like, "Unable to allocate 4294958111 bytes of memory; maximum memory is 939524096, but 3654011 is already used, and no further memory can be freed."
  • [1144553] If a profile has session information, and the database directory is non-default, profile conversion will fail with an error, "Can't find tableAlias=, fieldName=ssession_id in table main_table," or "Unknown database field "ssessions" in cross-reference group."
  • [1149031] Fixed a bug where conversion of an 8.1 database to 8.5 would fail silently if the profile had no session information, eventually causing an error like, "Unable to read file LogAnalysisInfo/Databases//main/Tables/xref0/header.cfg."
  • [1156064] The get_report action does not include the main (non-aggregating) column in the XML result.
  • [1159985] For the log format "Aventail Client/Server Access," profile creation fails with the error, 'Error in profile_setup create_report(), the report element type "sessions_overview" is not supported.'
  • [1164125] In Sawmill Lite click on Log Source, Database Info, Update Database or Build Database in Config. Sawmill shows the "No permission to view this page ... " alert.
  • [1164128] In IE6 try to open the Config Option Database Info, Update Database, Build Database, Log Parsing Filters or Database Filters. They show a blank page indicating a javascript error.
  • [1164135] In IE6 go to Config Report Options and click the Config Options link. The navigation bar shows form elements (list boxes) from the underlying form.
  • [1164140] In IE6 open Config Log Parsing Filters or Database Filters. The textarea element aligns to the right.
  • [1164142] In IE6 or IE8 open Config Log Filters and click on individual log filters, then view a different page. Sawmill shows an alert about unsaved log filters changes although no changes have been made.
  • [1165249] Fixed a bug which could cause sporadic crashes of the subordinate web server process (resulting in images and other support files failing to load in the web interface).
  • [1165798] Go to Admin/User Settings and enter a new password, mistype the second password and click Save Changes. The changes are not saved and no error message is shown about the mistyped password.
  • [1007266] Various counts in the Postfix Mail Server or Brightmail Gateway plug-in, such as "Messages blocked" were being counted for each recipient, inflating the count.
  • [1115018] The Sessions snapon is always installed with a timeout of 1800, even when the log format plug-in has a different timeout. Also, the Sessions snapon does not recognize "logout" events.
  • [1117001] When using MS SQL as the back-end database, and using bulk_insert as the insert mode, and using a wildcard report filter, report generation gives an error like, "BULK INSERT filtertmp_5852_0 FROM 'C:\LoadDataDirectory\results.aec.gov.au.2011.to.2012\sql_load_data_5852_seq0.tsv"
  • [1134950] On Mac OS, the Sawmill logo and and Use Sawmill window graphic are out of date.
  • [1136138] Network action accesses give an error, "Syntax error: Unknown variable 'action_fail' in expression"
  • [1139624] A bug report submission can fail on 32-bit systems, given an error like, "Unable to allocate 4294958111 bytes of memory; maximum memory is 939524096, but 3654011 is already used, and no further memory can be freed."
  • [1144553] If a profile has session information, and the database directory is non-default, profile conversion will fail with an error, "Can't find tableAlias=, fieldName=ssession_id in table main_table," or "Unknown database field "ssessions" in cross-reference group."
  • [1149031] Fixed a bug where conversion of an 8.1 database to 8.5 would fail silently if the profile had no session information, eventually causing an error like, "Unable to read file LogAnalysisInfo/Databases//main/Tables/xref0/header.cfg."
  • [1156064] The get_report action does not include the main (non-aggregating) column in the XML result.
  • [1164125] In Sawmill Lite click on Log Source, Database Info, Update Database or Build Database in Config. Sawmill shows the "No permission to view this page ... " alert.
  • [1164128] In IE6 try to open the Config Option Database Info, Update Database, Build Database, Log Parsing Filters or Database Filters. They show a blank page indicating a javascript error.
  • [1164135] In IE6 go to Config Report Options and click the Config Options link. The navigation bar shows form elements (list boxes) from the underlying form.
  • [1164140] In IE6 open Config Log Parsing Filters or Database Filters. The textarea element aligns to the right.
  • [1164142] In IE6 or IE8 open Config Log Filters and click on individual log filters, then view a different page. Sawmill shows an alert about unsaved log filters changes although no changes have been made.
  • [1165249] Fixed a bug which could cause sporadic crashes of the subordinate web server process (resulting in images and other support files failing to load in the web interface).
  • [1165798] Go to Admin/User Settings and enter a new password, mistype the second password and click Save Changes. The changes are not saved and no error message is shown about the mistyped password.
  • [1084636] Asking for password to be emailed gives an error, "Invalid sender in send_email()."
  • [1093134] Database builds can crash if some xrefs are disabled.
  • [1094316] The "+" icons in the Session Paths report have no effect.
  • [1097200] The Pages/Directories report isn't hierarchically zoomable.
  • [1101001] Queries on real-time databases give an error, "Unable to read file LogAnalysisInfo/Databases/wri/main/Tables/xref0/header.cfg (Operation timed out)."
  • [1113948] A Flash Media Server profile created with x-duration unchecked in the New Profile Wizard, gives an error on build, "Syntax error: Unknown variable 'x_duration' in expression"
  • [1114148] Updating a database for a Flash Media Server profile, or any other profile with a "node" type database filter variable, may give an error like, "Couldn't find node 4616027 in untitleds."
  • [1114349] Network action access to get_report gives an error, "Couldn't find node header in untitleds."
  • [1114357] The Admin menu appears obscured by the Config menu, when the Config menu is pulled down.
  • [1123802] The Individual Sessions report contains enormous bogus session IDs in some rows.
  • [1129556] Viewing reports after attaching a "Particular File Access" snapon gives an error like, 'the database field node "accesses_on__robots_txt" refers to the log field node "" but this log field does not exist.'
  • [1130487] Clicking "Customize Report In Config" doesn't open the report--it opens the Report Editor, but not the report itself.
  • [952934] Progress display shows "Generating report" during snapon attachment.
  • [1064630] Attaching the "Particular file access" snapon gives an unexpanded variable value "$lang_admin.snapons.particular_file_access.parameters.pathname.parameter_value" as the default value in the "Pathname of file" field.
  • [1069711] Attaching double_hits snapon gives the error: "Expected ADD or DROP in ALTER TABLE query, found 'double_hits'"
  • [1069746] Progress displays on Windows during database filtering contain odd characters.
  • [1070815] Parsing of Flash Media Server logs (or any other profile with many "float" type aggregating fields) on multiprocessor Windows systems is about 5x slower than it ought to be.
  • [1074140] When attempting to attach the "Unique Values" snapon to a Flash profile, an error occurs, "Unknown variable 'lang_admin.snapons.unique_values.unique_field_name.ratio_field.parameter_value' in expression."
  • [1075902] When creating a profile with a Shoutcast w3c log, after clicking "Finish" this error is displayed: "Snapon attempted to add database field 'session_id', which already exists"
  • [1075940] Byte numbers are wrong (much too high) for Flash profiles.
  • [991021] Viewing reports of a v8 profile converted to new format, gives, "Can't find tableAlias=, fieldName= in table xref0."
  • [1058009] Visitors, and other "unique" fields, show zeros in some reports.
  • [1062806] The Overview shows 0 for visitors, or other unique fields, for some (larger?) datasets.
  • [1063606] Attempting to attach the "Particular File Access" snapon immediately gives an error, "Unknown variable 'lang_admin.snapons.particular_file_access.parameters.page_field.label' in expression".
  • [981742] Building the database for a PIX profile gives an error, 'Unknown index colum "user" in main_table.'
  • [986528] For larger datasets, unique numbers (e.g., visitors) may be too low, or zero, in the Overview.
  • [988303] The Log Processing page in Config is empty, for some profiles.


Ältere Einträge

Informationen

Versionen: Lite, Professional, Enterprise

Plattformen: Windows, Macintosh, Linux, FreeBSD, Solaris u.a.

Unterstützte Logformate: über 900

Sprachen: mehrsprachig (DE, EN u.a.)

Preise: ab 210 EUR (inkl. MwSt.)

Preise für Vollversionen

Informationen zu Upgrades & Optionen



Exklusiv bei H&P

Die aktuellen deutschen Versionen und deutschsprachigen Support erhalten Sie exklusiv nur bei H&P. » mehr