Knowledgebase : Database
Which database should you use, the internal or MySQL database? If you don't have Enterprise licensing, you must use the internal database. But if you do, MySQL is slower than the internal database, so if it's performance you're after, go internal. My...
Reducing the word length of database fields On a 64bit OS/Platform the default word length for db fields is 64, and so where 64 bits will never be required, it is sometimes helpful to reduce the word length and save space in the database. You can do th...
Reducing Database Disk UsageSawmill reads log data, stores it in a database, and generates reports from that database. This "back end database" contains virtually all the information from the original log files, and also contains a large amoun...
You can remove a field manually, but there a number of steps and they need to be done in the correct order. The following guide has been put together to remove a Source Port field in a profile. Not all options will be available in all log formats: How ...
If you get a message while filtering that Sawmill is doing a "main table scan" you will notice slower responses from the reporting UI. The reason for this is that Sawmill does not have the results for the report you have asked for in the "...
If Sawmill reports that MySQL is not available in this build, it is because Sawmill does not have access to the system libraries that provide this functionality. Sawmill is built on vanilla distributions for the pre-built binaries. Most Linux and some ...
ODBC Database compatibility Sawmill 8 supports only Oracle and MS SQL via ODBC. If another database server were *fully* compatible with Oracle or MSSQL, it would be possible to select the compatible database in Sawmill, and use ODBC to talk to it. ** LI...
If you want to change the database type from Internal to an ODBC/MySQL server (or vice versa), you need to export it, change the database server type, and then import it. This is done from the command line: To export a database, use this command (wh...
How do you create a cluster of Sawmill nodes If you need "High Availability", see this page [https://www.sawmill.co.uk/docs/?dp+docs.technical_manual.high_availability]  this will require one license per server (node) in the cluster. If you need "Clu...
You can change databases from the UI at any time (View Config > Database > Server), but this is how you do it so that you don't need to rebuild the database:If you wish to keep the database you have built instead of rebuilding, then you need to ex...
LOAD DATA LOCAL INFILE says to the *client library* (which is hooked to Sawmill, on the server running Sawmill), "here's the pathname of a CSV file to import into that MYSQL database." The client library then transmits the information across the...
Sawmill 8 defaults to nvarchar(200) for all SQL database fields, but this can be overridden by editing the database field record, in the profile CFG file. For instance, this database field: hit_type = { type = "string" label = "{...
Sawmill defaults to nvarchar(200) for all database fields, but this can be overridden by editing the database field record, in the profile CFG file.For instance, this database field:hit_type = {  type = "string"  label = "{=capitalize(exp...
Moving an existing DatabaseYou need to specify the database location in the profile, once you have done that, you can move the database there, here are the steps: 1. Edit the profile file View Config > Database > Server > Database folder and add...