Log Viewers?

mjakel_ironport · ‎04-17-2007

Can anyone Recommend a good log viewer for the IronPort S-Series ?

jowolfer · ‎04-23-2007

Michael,

I'm asking around here to see if anyone has any suggestions for log viewing software.

The following available log formats are standard:

Squid
Apache

Most logging software will be able to read these in. I'll follow up later with any suggestions I receive for specific software.

Denis_ironport · ‎04-23-2007

Can anyone Recommend a good log viewer for the IronPort S-Series ?

AWStats (http://awstats.sourceforge.net/) supports apache as well as squid log format. It's open source and free. t's written in perl so you can easily modify the source if you want it to do more stuff than it already does.
I recommend trying it.

scott.taylor_ironport · ‎10-22-2007

If you're looking for a good GUI log viewer there are a few out there which can do the job.
Sawmill will analyze all the S series data and produce category reports etc, though we have had a performance issue with this due to the size of the logs generated.
Cyfin reporter had much improved performance over Sawmill, though this has it's own category list which are slightly different from the S series categories.

verylongbloke_ironport · ‎10-23-2007

I just found out about an australian product Web Spy

http://webspy.com/products/analyzer/index.aspx

Been tested and is more colorful and supports the S series logs as well. :shock:

conauman · ‎10-23-2007

Please feel free to post recommendations for third-party tools for WSA under the "Sticky" topic that lslocum posted at the top of this forum. This way all IPN citizens can benefit from your recommendations.

Cordelia
Knowledge Engineer III, SSO
www.ironport.com