We are using Bluecoat's ProxySG device in our office. It is sending its logs to an instance of Bluecoat Reporter running on a Windows 2003 server. I've had a difficult time with the software. It seems to stop processing logs fairly often. Now it's complaining about not being able to find a handler process when you connect to the web GUI. Is anybody out there using something else for processing their Bluecoat logs?
The Bluecoat reporter is based on Sawmill originally. I'm not sure I would recommend it but it may point you in the right direction. Webtrends is another product but I've found it cumbersome.
I personally continue to use the Bluecoat Reporter. The latest version I have has been much more stable than past versions. I don't use the streaming functionality of the logs but process logs FTP-ed to our server. This has helped our stability. Occasionally, maybe once a year, I have an issue (mostly due to an out of disk error on my part) that corrupts the DB but then I just rebuild from the logs again (which takes time but works) and it's off and running.