JP5890301B2 - User behavior visualization information providing device and method, program, and access log analysis device - Google Patents

Description

  The present invention relates to a user behavior visualization information assigning device and method, a program, and an access log analysis device, and in particular, what kind of Web a user can access from a URL (Uniform Resource Locator) of an access log for each user that records behavior on the Web. The present invention relates to a user behavior visualization information adding device and method, a program, and an access log analysis device for classifying whether a page has been browsed and grasping a user's behavior.

  For example, in “Yahoo! Category Search (registered trademark)” (see Non-Patent Document 1) as a function for providing classification information for only registered URLs, a category indicating what information is present in the website We publish it so that URLs can be classified, organized and searched according to the system. Basically, you can search by category and get the URLs that belong to it.

  Similarly, Netstar (registered trademark) category registration confirmation (see Non-Patent Document 2) also includes a confirmation interface that can acquire a category for a registered URL.

Yahoo category http://dir.hahoo.co.jp/ NetSTAR category classification check http://category.netstar-inc.com/check/index.html

  However, by using the category search of Non-Patent Document 1, it is possible to acquire the category to which the URL is registered, but not the category related to the unregistered host. There is a problem.

  Non-Patent Document 2, for example, can obtain the classification result of information of http://www.itmedia.co.jp/news/ (IT Media News (registered trademark)), but http: //www.itmedia Classification results cannot be obtained for information on .co.jp / (IT media (registered trademark)).

  As described above, in the conventional portal site, the classification information can be obtained only for the registered URL.

  The present invention has been made in view of the above points, and a user behavior visualization information providing device capable of obtaining information that is a clue for classifying URLs from only URLs that are not registered in a user's access log, and It is an object to provide a method, a program, and an access log analysis apparatus.

In order to solve the above problems, the present invention (Claim 1) is a user behavior visualization information providing device for grasping a user's behavior from a URL of an access log for each user that records the behavior on the Web,
Additional information storage means for storing domain data associated with domain-related information corresponding to a domain name and host data associated with a host name and host-related information for adding to the access log;
URL dividing means for dividing the URL of the input access log into a scheme, a domain name, a host name, and a path, and inspecting the presence or absence of the directory portion of the path;
The additional information storage means for the scheme, the domain name, and the host name divided by the URL division means based on matching rules that match the data of the additional information storage means in the order of domain name, host name, and path see, I have a, and giving information determining means for outputting the result storage means together with the access logs searched issuance information,
The given information determining means includes
Based on the domain name, domain grant information is obtained by referring to the domain data in the additional information storage means, host grant information is obtained by referring to the host data based on the host name, and based on the path By referring to the path match list storing one character following the “/” at the head of the path included in the host data, a pair of a corresponding path list and host assignment information is obtained, and the host is based on the path. Means for outputting the domain assignment information and the path-host assignment information when a path included in the data is obtained;
Based on the domain name, domain grant information is obtained by referring to the domain data in the additional information storage means, host grant information is obtained by referring to the host data based on the host name, and based on the path When the path match list included in the host data is referred to, a pair of a corresponding path list and host assignment information is obtained, and when a path included in the host data corresponding to the path is not obtained, Means for outputting the domain grant information and the host grant information;
Based on the domain name, domain grant information is obtained by referring to the domain data in the additional information storage means, host grant information is obtained by referring to the host data based on the host name, and based on the path The path match list included in the host data is referred to, and when a pair of a corresponding path list and host assignment information is not obtained, means for outputting the domain assignment information and the host assignment information;
Domain grant information is obtained by referring to the domain data of the additional information storage means based on the domain name, and host grant information cannot be obtained by referring to the host data based on the domain name, When there are a plurality of hosts having the same role included in the domain data and the host name is in a special host rule that is a rule for handling a plurality of hosts that may be given the same grant information of the host data Includes host grant information corresponding to the host name, means for outputting the domain grant information,
Domain grant information is obtained by referring to the domain data of the additional information storage means based on the domain name, and when there is no host name in the special host rule, means for outputting unknown host domain grant information;
Including

Further, the present invention (Claim 2 ) is a user behavior visualization information providing device for grasping a user's behavior from a URL of an access log for each user that records the behavior on the Web,
Additional information storage means for storing domain data associated with domain-related information corresponding to a domain name and host data associated with a host name and host-related information for adding to the access log;
URL dividing means for dividing the URL of the input access log into a scheme, a domain name, a host name, and a path, and inspecting the presence or absence of the directory portion of the path;
The additional information storage means for the scheme, the domain name, and the host name divided by the URL division means based on matching rules that match the data of the additional information storage means in the order of domain name, host name, and path The attached information determining means for outputting the searched assigned information together with the access log to the result accumulating means,
Have
The given information determining means includes
When the URL division means includes the directory part in the path, it is determined whether one character following the leading “/” is included in the path match list. And host addition information are added, and arbitrary addition processing is performed as necessary. If the directory portion is not included in the path, matching with the path match list is not performed, and arbitrary addition processing is performed as necessary. Including means.

  According to the present invention, information that is a clue for classifying URLs can be obtained from URLs alone by previously creating matching rules and information to be assigned when the rules are matched. By applying this technology to the URL included in the user's access log, it can be used for grasping the user's behavior.

It is a block diagram of the user action visualization information provision apparatus in the 1st Embodiment of this invention. It is an example of the access log of the access log storage device in the first exemplary embodiment of the present invention. It is an example of data of grant information DB in a 1st embodiment of the present invention. It is a structural example of URL of the access log in the 1st Embodiment of this invention. It is a flowchart of the provision information determination part in the 1st Embodiment of this invention. It is an example of the output data in the 1st Embodiment of this invention. It is a block diagram of the access analysis apparatus in the 2nd Embodiment of this invention.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  Since new hosts appear on the Web every day, the correct category cannot be acquired if the host is an unregistered host. However, from the point of view of user behavior, it is useful to show that it is a part of a certain Web service, even if it is not the correct category. For example, Yahoo! Auction (registered trademark), one of Web services, is made up of a number of hosts with http://auctions.yahoo.co.jp/ as the service top. Although it is difficult to know all these host names accurately, it is possible to guess that "XXX.auctions.yahoo.co.jp" will be part of Yahoo! Auction (registered trademark), Being shown to be part of Yahoo! Auction (registered trademark) makes it easier to understand what kind of Web service you used.

  As described above, even if the host is not registered, it is often possible to present some additional information as long as the host is a domain up to a certain level. For example, even if a host that provides a new service in Yahoo (registered trademark) (yahoo.co.jp) is added (eg, newservice.yahoo.co.jp is newly operating), it will be added to the yahoo.co.jp domain. It is also useful to simply indicate that it is a “part of Yahoo (registered trademark)” because it belongs.

  In many blog sites, a blog user is assigned to each host. For example, a So-net (registered trademark) blog (http://blog.so-net.ne.jp/) allocates a host for each user (eg, http://amanosworld.blog.so-net.ne). In the case of .jp /), it may be useful to just show additional information called a blog site in the domain (blog.so-net.ne.jp).

  FIG. 1 shows a configuration of a user behavior visualization information providing device according to an embodiment of the present invention.

  The user action visualization information adding device 10 shown in FIG. 1 includes a URL division processing unit 11, a grant information determining unit 12, and a grant information DB 13. The URL split processing unit 11 is added to the access log storage device 1 and a grant information determining unit. Reference numeral 12 is connected to the result storage device 2. The URL division processing unit 11 acquires an access log from the access log storage device 1, divides a URL from the access log, extracts a scheme, a domain name, a host name, and a path, and inspects and adds a directory portion. It outputs to the information determination part 12. The grant information determination unit 12 searches the grant information DB 13 based on the domain name, acquires the grant information, and outputs the access log and the grant information to the result storage device 2.

  An example of the access log storage device 1 is shown in FIG. The access log holds the access time and the accessed URL for each user ID.

As shown in FIG. 3, the assignment information DB 13 includes domain data and host data.
The domain data has a domain name and domain related information as shown in FIG. The domain related information includes a scheme, domain assignment information, special host rules, and host assignment information. As shown in FIG. 4B, the host data has a host name and host-related information, and the host-related information includes a scheme, a host assignment information, a path match list, a path list, and host assignment information (path). .

  The URL division processing unit 11 acquires an access log, extracts a scheme, a domain name, a host name, and a path from the URL, and checks whether there is a directory in the path part. An example of the URL of the access log is shown in FIG. In this embodiment, a scheme for identifying a protocol, a host part for identifying a machine executing a Web server or a Web application, a domain name, a Web server, and path information for identifying a message destination in the application are extracted. To do.

  The assignment information determination unit 12 generates a domain name and determines the assignment information. The domain name is generated from the host name of the URL up to the 2nd or 3rd level. In Japan, co, ne, go, ed, ad, ac, or, gr, and lg are 2nd level reserved domains. In these cases, domain names up to the 3rd level domain are handled.

  The scheme handled by the grant information determination unit 12 is arbitrary, but some scheme and domain grant information must be described. The assignment information determination unit 12 can determine the domain assignment information to be assigned to the URL when the domain name and the scheme are determined.

  The special host rule of the assignment information DB 13 is the same by using a regular expression or the like to express concisely rather than preparing an entry for each host name when there are multiple hosts having the same role. This is a rule for handling a plurality of hosts that may be given assignment information. For example, blog ... matches hosts such as “blog000” and “blog111” and adds host assignment information called mail to the URL.

  Once the host name and scheme are determined, the host assignment information to be assigned to the URL can be determined. However, depending on the host, the service may change depending on the path. Therefore, such a path is handled as a path list of host data (FIG. 3B). The number of paths collected in the path list may be quite large depending on the host. Since it is necessary to inspect whether the number of paths matches the number of characters in the path, if the number is large, the inspection takes time. In addition, since the path is composed of a plurality of words with “/” as a delimiter, if a search is performed using a combination of words based on the path portion of the URL, the path index becomes complicated. For this reason, it is more efficient to determine whether or not all the path character strings match from the beginning of the path portion of the URL based on the path list included in the host data. Furthermore, in order to eliminate unnecessary path inspections, one character following the “/” at the head of the path in the result path list is collected and stored as path match list in the host data (FIG. 3B) of the assignment information DB 13. . As a result, it is possible to determine whether or not the inspection in the path list is necessary or not only by inspecting one character.

  For example, for a URL (http://www.aaa.co.jp/articles/20120101.html), the single character "a" following the first / in the path part (/articles/20120101.html) Since it is not included in this path list (nmb), “portal” is given as the host assignment information.

  Also, for a URL (http://www.aaa.co.jp/news/20120101.html), the "n" following the / at the beginning of the path part (/news/20120101.html) Since it is included in the path list (nmb), it is subsequently checked whether all the paths (/ news /) in the path list are included in the path portion of the URL. Since this case is included, “news” is given as the host assignment information.

  Also, since URLs may contain search queries and blog user names, if you want to extract this information from the URL, add a mechanism to describe specific keywords in the host assignment information as a control. May be.

  FIG. 4 is a flowchart of the assignment information determination unit in the embodiment of the present invention.

  The assignment information determination unit 12 generates a domain name using 2nd or 3rd from the URL acquired from the URL division processing unit 11 (step 1).

  The following processing matches the assignment information DB 13 in the order of domain name, host name, and path.

  It is determined whether or not the domain name generated in Step 1 is registered by referring to the domain data in the assignment information DB 13 (Step 2). If not, it is output as an unknown domain and the process is terminated (step 3). If there is a domain name, the domain assignment information corresponding to the scheme is assigned to the URL based on the acquired domain related information. Even if there is no corresponding scheme in the domain data related information, there is always some scheme and domain assignment information.

  Based on the host name acquired from the URL division processing unit 11, the host name is searched by referring to the host data in the assignment information DB 13 (step 4). If there is no host name, step 4 (No) is performed, and it is checked whether the host data conforms to the special host rule (step 5). If it matches the special host rule, the host additional information is added to the URL and output. If it does not match (step 5, no), only the domain assignment information is output (step 6).

In step 4, if the host name is in the host name data and there is a directory in the path part, whether or not one character following the "/" at the beginning of the path part is included in the host data path match list If it is not included in the path match list (step 7), domain assignment information and host assignment information are attached to the URL (step 8), and depending on the content of the assignment information, additional processing is performed and output. If there is no directory in the path part, it is not necessary to collate with the path match list, but depending on the content of the assignment information, additional processing is performed and the result is output.
An example of the additional processing is extraction of a search keyword. As an additional processing, the search keyword extraction rule is, for example, a method of extracting% 00% 11 from search.cgi? Query =% 00% 11 and decrypting the input search keyword if possible There is.

  If the path matches the path in the path match list in step 7, it is checked whether the paths in the path list are sequentially included in the path portion of the URL (step 9), and if they are included (step 9, Yes), host assignment information (path) is assigned to the URL, and depending on the content of the assignment information, additional processing is performed and output. If not (step 9, no), only domain assignment information and host assignment information are assigned and output (step 10). When determining the path list, only one character following the leading “/” in the path list is checked.

  In step 5 above, if there is a host name that matches the special host rule of the host data and additional processing is required (step 11 is present), domain assignment information, host assignment information, and additional processing information are output. (Step 12). When the additional processing is not required (step 11, no), the domain assignment information and the host assignment information are output (step 13).

  If there is a path corresponding to the path list in the above step 9 and additional processing is necessary (step 14 is present), for example, the search keyword is extracted from the search keyword extraction rule as described above. (Step 16). If additional processing is not required (step 14, no), domain assignment information and host assignment information (path) are output (step 15).

  An example of data output by the above processing is shown in FIG. As shown in the figure, the URL, domain assignment information, and host assignment information are output to the result storage device 2.

  With the above processing, it is possible to give domain assignment information and host assignment information to the URL of the target access log.

[Second Embodiment]
In the present embodiment, an access log analyzing apparatus for adding an aggregation function to the function of the user behavior visualization information providing apparatus in the first embodiment and analyzing an access log will be described. The access log analysis apparatus retains not only the name of the Web site but also the operation source and related information in the domain assignment information, and enables the aggregation at the operation source and the aggregation based on the related information.

  FIG. 6 shows the configuration of the access log analysis apparatus according to the second embodiment of the present invention.

  The access log analysis apparatus 20 shown in the figure has a provision information development unit 21, a development provision information storage unit 22, and a provision information aggregation unit 23. The provision information development unit 21 is an access log in the first embodiment. The assignment information is stored in the result storage device 2 in which the assignment information is stored, and the assignment information aggregating unit 23 is connected to the aggregation result storage device 3. The access log analysis device 20 shown in the figure has a configuration independent of the user behavior visualization information adding device 10 shown in FIG. 1, but is not limited to this example, and the user behavior visualization information grant shown in FIG. 1 is provided. A configuration including the device 10 may be adopted.

  The assignment information development unit 21 includes a memory 211 that stores additional information such as a brand for domain assignment information and host assignment information in the form of related information associated with the label name of the domain assignment information, a dictionary, a rule, Read the access log (URL) and grant information (domain grant information, host grant information) from the result storage device 2, extract user information and URL from the access log, and refer to the memory 211 to give the domain grant information or host grant Additional information with respect to the information is acquired or generated, and stored in the development and grant information storage unit 22 together with the grant information.

  The domain assignment information is mainly described by describing a Web service name (for example, Yahoo! (registered trademark), Rakuten Ichiba (registered trademark), etc.), which makes it easy to understand what site is accessed. In addition to this, by adding additional information as described above and storing it in the development grant information storage unit 22, the grant information aggregating unit 23 tabulates based on the operating company name, and thus cannot be tabulated only by the URL. Events can be visualized. For example, when there are a site a, a site b, and a site c as sites related to Rakuten Ichiba (registered trademark), it is possible to count how many times each site has been accessed for each user.

  The additional information added by the assignment information expansion unit 21 will be described.

  For example, a company that handles cosmetics has various brand names and operates an official website under the brand name. As to which company of these brand sites is the parent company, a relationship is created by manual or mechanical estimation processing and stored in the memory 211 in the assignment information development unit 21. For example, SK-II (registered trademark) (www.sk-ii.jp) is based on P & G (registered trademark), and P & G (registered trademark) is also Arière (registered trademark) (http: // myrepi .com / ariel /) and Fabrys (registered trademark) (http://www.febreze.jp/), a relationship that cannot be estimated by the URL alone is added to the grant information as additional information and stored in the deployment grant information storage unit 22. Store.

  Thereby, the grant information aggregating unit 23 can collect access to a plurality of brands of a specific manufacturer by using the information stored in the development grant information storage unit 22.

  In addition, in the grant information development unit 21, a label is given to the host grant information in consideration of the aggregation in the grant information aggregating unit 23 later, and is stored in the deployment grant information storage unit 22.

  The grant information aggregating unit 23 can grasp access to different domains belonging to the same label, that is, a competing service, using the host information and the label of the development grant information storage unit 22.

  For example, by adding a label such as “Portal” to “www.Yahoo.co.jp” or www.goo.ne.jp, it is easy to recognize the accessed services, and competing by counting with “Portal” You can see how to use the service.

  The grant information aggregating unit 23 can perform various tabulations, and outputs, for example, the domain grant information usage rate for each user, the number of users for each label of the host grant information, and the like to the aggregation result storage device 3.

  The present invention constructs the operations of the constituent elements of the user behavior visualization information providing device shown in FIG. 1 and the access analysis device shown in FIG. 7 as a program, and is used as the user behavior visualization information provision device and the access analysis device. It can be installed and executed on the network, or distributed via a network.

  The present invention is not limited to the above-described embodiments, and various modifications and applications are possible within the scope of the claims.

DESCRIPTION OF SYMBOLS 1 Access log storage device 2 Result storage device 3 Expansion provision information storage part 10 User action visualization information provision apparatus 11 URL division | segmentation process part 12 Assignment information determination part 13 Assignment information DB
20 Access Analysis Device 21 Granted Information Expanding Unit 22 Expanded Granted Information Storage Unit 23 Granted Information Aggregating Unit 211 Memory

Claims (7)

A user behavior visualization information providing device for grasping a user's behavior from a URL of an access log for each user that records the behavior on the web,
Additional information storage means for storing domain data associated with domain-related information corresponding to a domain name and host data associated with a host name and host-related information for adding to the access log;
URL dividing means for dividing the URL of the input access log into a scheme, a domain name, a host name, and a path, and inspecting the presence or absence of the directory portion of the path;
The additional information storage means for the scheme, the domain name, and the host name divided by the URL division means based on matching rules that match the data of the additional information storage means in the order of domain name, host name, and path The attached information determining means for outputting the searched assigned information together with the access log to the result accumulating means,
I have a,
The given information determining means includes
Based on the domain name, domain grant information is obtained by referring to the domain data in the additional information storage means, host grant information is obtained by referring to the host data based on the host name, and based on the path By referring to the path match list storing one character following the “/” at the head of the path included in the host data, a pair of a corresponding path list and host assignment information is obtained, and the host is based on the path. Means for outputting the domain assignment information and the path-host assignment information when a path included in the data is obtained;
Based on the domain name, domain grant information is obtained by referring to the domain data in the additional information storage means, host grant information is obtained by referring to the host data based on the host name, and based on the path When the path match list included in the host data is referred to, a pair of a corresponding path list and host assignment information is obtained, and when a path included in the host data corresponding to the path is not obtained, Means for outputting the domain grant information and the host grant information;
Based on the domain name, domain grant information is obtained by referring to the domain data in the additional information storage means, host grant information is obtained by referring to the host data based on the host name, and based on the path The path match list included in the host data is referred to, and when a pair of a corresponding path list and host assignment information is not obtained, means for outputting the domain assignment information and the host assignment information;
Domain grant information is obtained by referring to the domain data of the additional information storage means based on the domain name, and host grant information cannot be obtained by referring to the host data based on the domain name, When there are a plurality of hosts having the same role included in the domain data and the host name is in a special host rule that is a rule for handling a plurality of hosts that may be given the same grant information of the host data Includes host grant information corresponding to the host name, means for outputting the domain grant information,
Domain grant information is obtained by referring to the domain data of the additional information storage means based on the domain name, and when there is no host name in the special host rule, means for outputting unknown host domain grant information;
The user action visualization information provision apparatus characterized by including . A user behavior visualization information providing device for grasping a user's behavior from a URL of an access log for each user that records the behavior on the web,
Additional information storage means for storing domain data associated with domain-related information corresponding to a domain name and host data associated with a host name and host-related information for adding to the access log;
URL dividing means for dividing the URL of the input access log into a scheme, a domain name, a host name, and a path, and inspecting the presence or absence of the directory portion of the path;
The additional information storage means for the scheme, the domain name, and the host name divided by the URL division means based on matching rules that match the data of the additional information storage means in the order of domain name, host name, and path The attached information determining means for outputting the searched assigned information together with the access log to the result accumulating means,
Have
The given information determining means includes
When the URL division means includes the directory part in the path, it is determined whether one character following the leading “/” is included in the path match list. And host addition information are added, and arbitrary addition processing is performed as necessary. If the directory portion is not included in the path, matching with the path match list is not performed, and arbitrary addition processing is performed as necessary. user behavior visualization applying device which comprises a means. A user behavior visualization information providing method for grasping a user's behavior from a URL of an access log for each user that records the behavior on the web,
Additional information storage means for storing domain data associated with domain-related information corresponding to a domain name, host data associated with a host name and host-related information, and URL dividing means for adding to the access log And an attached information determining means,
The URL dividing means divides the URL of the input access log into a scheme, a domain name, a host name, and a path, and a URL dividing step for checking whether there is a directory part in the path;
The attached information determining means is configured to divide the scheme, the domain name, and the host divided by the URL dividing means based on a matching rule that matches data in the additional information storage means in the order of domain name, host name, and path. A grant information determination step of referring to the additional information storage means for the name and outputting the searched grant information together with the access log to the result storage means;
The stomach line,
In the grant information determination step,
The grant information determining means refers to the domain data of the additional information storage means based on the domain name to obtain domain grant information, and refers to the host data based on the host name to obtain host grant information. Based on the path, a path match list containing one character following “/” at the head of the path included in the host data is referred to, and a pair of a corresponding path list and host assignment information is obtained. When a path included in the host data is obtained based on the path, outputting the domain grant information and the path-host grant information;
The grant information determining means refers to the domain data of the additional information storage means based on the domain name to obtain domain grant information, and refers to the host data based on the host name to obtain host grant information. Based on the path, the path match list included in the host data is referred to, a pair of a corresponding path list and host assignment information is obtained, and a path included in the host data corresponding to the path is obtained. If not, outputting the domain grant information and the host grant information;
The grant information determining means refers to the domain data of the additional information storage means based on the domain name to obtain domain grant information, and refers to the host data based on the host name to obtain host grant information. When the path match list included in the host data is obtained based on the path and a pair of the corresponding path list and host assignment information cannot be obtained, the domain assignment information and the host assignment information are Output step;
The grant information determining means refers to the domain data in the additional information storage means based on the domain name to obtain domain grant information, and refers to the host data based on the domain name to obtain host grant information. If there is a plurality of hosts having the same role included in the domain data, a special host rule that is a rule for handling a plurality of hosts that may be given the same grant information of the host data. The host assignment information corresponding to the host name, and outputting the domain assignment information,
The assignment information determining means refers to the domain data in the additional information storage means based on the domain name, and domain assignment information is obtained. If the host name is not included in the special host rule, an unknown host domain assignment is performed. Outputting information; and
A method for providing user behavior visualization information, characterized by:   A user behavior visualization information providing method for grasping a user's behavior from a URL of an access log for each user that records the behavior on the web,
  Additional information storage means for storing domain data associated with domain-related information corresponding to a domain name, host data associated with a host name and host-related information, and URL dividing means for adding to the access log And an attached information determining means,
  The URL dividing means divides the URL of the input access log into a scheme, a domain name, a host name, and a path, and a URL dividing step for checking whether there is a directory part in the path;
  The attached information determining means is configured to divide the scheme, the domain name, and the host divided by the URL dividing means based on a matching rule that matches data in the additional information storage means in the order of domain name, host name, and path. A grant information determination step of referring to the additional information storage means for the name and outputting the searched grant information together with the access log to the result storage means;
And
  In the grant information determination step,
  In the case where the directory information is included in the path by the URL dividing unit, the addition information determining unit determines whether one character following the “/” at the head of the path is included in the path match list, and is not included. In this case, add domain assignment information and host assignment information to the URL, and perform any additional processing as necessary. If there is no directory part in the path, the path match list is not checked. And performing a step of performing an arbitrary additional process. Computer
The user action visualization information provision program for functioning as each means of the user action visualization information provision apparatus of Claim 1 or 2 . An access log analysis device for grasping and analyzing user behavior from the URL of the access log for each user that records behavior on the web,
Additional information storage means for storing domain data associated with domain-related information corresponding to a domain name and host data associated with a host name and host-related information for adding to the access log;
URL dividing means for dividing the URL of the input access log into a scheme, a domain name, a host name, and a path, and inspecting the presence or absence of a directory part in the path;
The additional information storage means for the scheme, the domain name, and the host name divided by the URL division means based on matching rules that match the data of the additional information storage means in the order of domain name, host name, and path The attached information determining means for outputting the searched assigned information together with the access log to the result accumulating means,
The access log and the attached information are read from the result storage unit, and the information related to the URL of the access log, the rule corresponding to the URL, or the related information in which the dictionary corresponding to the URL is stored in advance An attached information expansion means for referring to the storage means, acquiring the related information corresponding to the URL, and storing it in the expanded assignment information storage means;
An assignment information aggregating unit that acquires the grant information and the related information from the development grant information storage unit, performs an arbitrary aggregation process, and stores the aggregation result and user information acquired from the access log in an aggregation result storage unit; ,
I have a,
The given information determining means includes
Based on the domain name, domain grant information is obtained by referring to the domain data in the additional information storage means, host grant information is obtained by referring to the host data based on the host name, and based on the path By referring to the path match list storing one character following the “/” at the head of the path included in the host data, a pair of a corresponding path list and host assignment information is obtained, and the host is based on the path. Means for outputting the domain assignment information and the path-host assignment information when a path included in the data is obtained;
Based on the domain name, domain grant information is obtained by referring to the domain data in the additional information storage means, host grant information is obtained by referring to the host data based on the host name, and based on the path When the path match list included in the host data is referred to, a pair of a corresponding path list and host assignment information is obtained, and when a path included in the host data corresponding to the path is not obtained, Means for outputting the domain grant information and the host grant information;
Based on the domain name, domain grant information is obtained by referring to the domain data in the additional information storage means, host grant information is obtained by referring to the host data based on the host name, and based on the path The path match list included in the host data is referred to, and when a pair of a corresponding path list and host assignment information is not obtained, means for outputting the domain assignment information and the host assignment information;
Domain grant information is obtained by referring to the domain data of the additional information storage means based on the domain name, and host grant information cannot be obtained by referring to the host data based on the domain name, When there are a plurality of hosts having the same role included in the domain data and the host name is in a special host rule that is a rule for handling a plurality of hosts that may be given the same grant information of the host data Includes host grant information corresponding to the host name, means for outputting the domain grant information,
Domain grant information is obtained by referring to the domain data of the additional information storage means based on the domain name, and when there is no host name in the special host rule, means for outputting unknown host domain grant information;
Access log analyzer which comprises a.   An access log analysis device for grasping and analyzing user behavior from the URL of the access log for each user that records behavior on the web,
  Additional information storage means for storing domain data associated with domain-related information corresponding to a domain name and host data associated with a host name and host-related information for adding to the access log;
  URL dividing means for dividing the URL of the input access log into a scheme, a domain name, a host name, and a path, and inspecting the presence or absence of a directory part in the path;
  The additional information storage means for the scheme, the domain name, and the host name divided by the URL division means based on matching rules that match the data of the additional information storage means in the order of domain name, host name, and path The attached information determining means for outputting the searched assigned information together with the access log to the result accumulating means,
  The access log and the attached information are read from the result storage unit, and the information related to the URL of the access log, the rule corresponding to the URL, or the related information in which the dictionary corresponding to the URL is stored in advance An attached information expansion means for referring to the storage means, acquiring the related information corresponding to the URL, and storing it in the expanded assignment information storage means;
  An assignment information aggregating unit that acquires the grant information and the related information from the development grant information storage unit, performs an arbitrary aggregation process, and stores the aggregation result and user information acquired from the access log in an aggregation result storage unit; ,
Have
  The given information determining means includes
  When the URL division means includes the directory part in the path, it is determined whether one character following the leading “/” is included in the path match list. And host addition information are added, and arbitrary addition processing is performed as necessary. If the directory portion is not included in the path, matching with the path match list is not performed, and arbitrary addition processing is performed as necessary. An access log analyzing apparatus comprising: means.

Images