Symantec Gateway Security
Sawmill Analytics ist ein Symantec Gateway Security Log Analyzer.
Sawmill Analytics kann Logdateien im Format Symantec Gateway Security verarbeiten und daraus dynamische Statistiken und Reports generieren. Die Daten werden in einer internen Datenbank oder in einer MySQL, Microsoft SQL Server oder Oracle Datenbank abgelegt. Der Zugriff erfolgt über ein Webinterface. Sawmill Analytics läuft auf (fast) jeder Plattform, einschließlich Windows, Linus, FreeBSD, OpenBSD, UNIX, Macintosh Mac OS, Solaris und anderen.
Sawmill Analytics speichert für Symantec Gateway Security die folgenden nicht-numerischen Felder in der Datenbank und erstellt für jedes Feld einen Report:
| Feld | Interner Name | ||
|---|---|---|---|
| date/time | date_time | ||
| day of week | day_of_week | ||
| hour of day | hour_of_day | ||
| logging device | logging_device | ||
| service | service | ||
| duration | duration | ||
| authentication result | authentication_result | ||
| ID | id | ||
| sent | sent | ||
| received | received | ||
| bytes | bytes | ||
| source interface | source_interface | ||
| source IP | source_ip | ||
| source port | source_port | ||
| source name | source_name | ||
| server source | server_source | ||
| server source port | server_source_port | ||
| destination interface | destination_interface | ||
| destination IP | destination_ip | ||
| destination port | destination_port | ||
| destination name | destination_name | ||
| client destination | client_destination | ||
| URL | url | ||
| result | result | ||
| protocol | protocol | ||
| rule ID | rule_id | ||
| message type | message_type | ||
| message | message | ||
| operation | operation | ||
| status | status | ||
| state | state | ||
| rule | rule | ||
| PID | pid | ||
| notes | notes | ||
| adapter | adapter | ||
| alert destination MAC address | alert_destination_mac_addr | ||
| alert source MAC address | alert_source_mac_addr | ||
| class | class | ||
| consolidated message | consolidated_message | ||
| count | count | ||
| CVE | cve | ||
| family | family | ||
| flag | flag | ||
| flow cookie | flow_cookie | ||
| host | host | ||
| interface | interface | ||
| interface ID | interface_id | ||
| interval | interval | ||
| IP code | ip_code | ||
| IP protocol | ip_protocol | ||
| level | level | ||
| outcome | outcome | ||
| packet | packet | ||
| payload left offset | payload_left_offset | ||
| payload right offset | payload_right_offset | ||
| policy tag | policy_tag | ||
| program name | program_name | ||
| reliability | reliability | ||
| request | request | ||
| resource | resource | ||
| response | response | ||
| string value | string_value | ||
| title | title | ||
| type | type | ||
| vendor | vendor | ||
| VLAN ID | vlan_id | ||
| month | month | ||
| user | user | ||
| setting | setting | ||
| key | key | ||
| revision | revision | ||
| domain | domain | ||
| client port | client_port | ||
| related ID | related_id | ||
| server | server | ||
| IP address | ip_address | ||
| license expiry date | license_exp_date | ||
| feature ID | feature_id | ||
| license type | license_type | ||
| product | product | ||
| version | version | ||
| detail | detail | ||
| antivirus comfort | av_comfort | ||
| antivirus scan | av_scan | ||
| context data | context_data | ||
| context description | context_description | ||
| probable probe | probable_probe | ||
| trace route TTL | trace_route_ttl | ||
| command | command | ||
| error number | error_number | ||
| information | information | ||
| length | length | ||
| limit | limit | ||
| message count | message_count | ||
| offset | offset |
Sawmill Analytics speichert für Symantec Gateway Security die folgenden numerischen Felder in der Datenbank und erstellt dafür eine Spalte in den meisten Reportansichten:
| Numerisches Feld | Interner Name | ||
|---|---|---|---|
| events | events | ||
| sent | sent | ||
| received | received | ||
| bytes | bytes | ||
| duration | duration |
Weitere Informationen zu Sawmill Analytics und den Möglichkeiten zur Anzeige, Filterung, Anpassung und dem Export der Symantec Gateway Security-Daten finden Sie in der Funktionsübersicht.
Hinweis: Sawmill Analytics unterstützt 988 verschiedene Logformate, größtenteils mit Unterformaten. Dennoch wird u.U. nicht jede Variante/Version und nicht jede Option unterstützt. Die Anpassung des Logfilters kann jedoch vom Support vorgenommen werden. Bitte nehmen Sie mit uns Kontakt auf.
Sawmill Analytics unterstützt derzeit 988 verschiedene Logformate (siehe Liste).
