Knowledgebase : Reports
The graph colours are defined in /path/to/Sawmill8/LogAnalysisInfo/graph_colors.cfg For single colours edit the graph_colors.single section: single = { bar_graph = { red = 70 green = 104 blue = 228 } # bar_graph ..... ... For numerical (specif...
First you need is a look-up table, such as this: ip_to_name = { 10_0_0_1 = "PC1" 10_0_0_2 = "PC2" 10_0_0_3 = "PC3" 10_0_0_4 = "PC4" 10_0_0_5 = "PC5" } You need to save this to a file called ip_to_name.cfg (the first line must match the file nam...
The following edit requires an Sawmill 7 Enterprise license: In LogAnalysisInfo/templates/statistics/report_elements/util/build_graph_table_rep_elem.cfv, change this: # ------------- # Display table # ------------- if (show_table) then ( # deb...
In this example we will use Minutes, but you can use hours/minutes/seconds for this by using 4/5/6 for the suppress level: 1. Create a new report field called "minutes" (it might be easier to copy the Days report field and rename it) and set the source a...
How to add a new "average" numerical field (the first example uses the "Time taken" field, to create an average of, the second uses the "size" field, any numerical field will work) There are two approaches to this, the first creates a whole new numerica...
To add an Average of an existing field, you need to: 1. Create a new report field called "[existing field name] Average" The easiest way to do this is to copy an existing report field (choose a numeric one, I chose Play Duration in this example) by g...
How to add a "Week of year" report 1. Go to Config Options > Database Fields > New database field and choose Log field: "week of year" and Type: Integer in the list of options (and give it a name - "Week of year") 2. Go to Config Options > Report Fiel...
To add additional columns to report tables, e.g., to add a single report which reports source IP, destination IP, source port, and destination port edit the profile .cfg file, which is in the profiles folder of the LogAnalysisInfo folder. Look for &quo...
By default all tables except the hour-of-day report has 10 rows (the hour-of-day has 24).To change this in any report edit the report table options:1. View Config > Manage Reports > Reports/Repors Menu > Edit.2. Go to the Report Elements tab, the...
1. Create a new database field, "unique_url": View Config > More Options > Database Fields Field name: unique_url Derivation method: log Field Log field: URL Type: Unique Aggregation method: Unique Category: none Integer bits: ...
The Hotel Problem We are not able to sum sessions in the same way we can sum events (or accesses or connections etc) so we can't give a total of all sessions when we break down sessions into rows of a table. This means we also can't sum the "oth...