For Logstash users, the best way to understand Sawmill is as a replacement of the filter section in the Logstash configuration file. Unlike Logstash, Sawmill does not have any inputs or outputs to ...

With Logstash, any data that carries a timestamp of some kind can be considered log data and can be ingested and processed according to user-defined rules.