KR20030095504A - Method of analyzing log information on the internet - Google Patents

Abstract

PURPOSE: A method for analyzing log information on the Internet is provided to install a log database on a web server, thereby preventing log information from being flowed out, and analyze the log information at a low cost. CONSTITUTION: If a client(10) connects to a web server(20), log information of the client(10) is automatically left in the web server(20). The log information is collected by a log agent program(29) of the web server(20) to be periodically transmitted to a log database(24). A web server manager(30) connects to an ASP(Application Service Provider) server(40) for requesting download of a log analyzing program(49) to analyze the log information of the web server(20). The ASP server(40) judges whether the web server manager(30) has a right authority. If so, the log analyzing program is downloaded to a computer of the web server manager(30). The web server manager(30) analyzes the log information stored in the log database(24) by using the downloaded log analyzing program(49).

Description

Method of analyzing log information on the internet}

The present invention relates to a method of analyzing log information on the Internet. More specifically, in the log analysis system on the Internet, an analysis tool that independently analyzes log information having a log DB where log information is stored is loaned from an ASP service provider (Application Service Provider) to analyze log information whenever necessary. The present invention relates to a method of analyzing log information that can improve security.

When an Internet user visits a website on the Internet, the web server automatically stores information such as the visitor's IP and the number of times of connection. This is called log information. Website administrators analyze this log information to understand the number of visitors to their website, their interests, and the behavior they see on the web server, and use them as important data for efficiently managing their website. .

What is conventionally used as a system for analyzing such log information can be roughly divided into two types. First, as shown in FIG. 1, the operator analyzes log information by installing a log DB 1 and a log information analysis tool 2 in which log information is stored in a web server w. In such a system, the access and use status of visitors can be analyzed in real time, and the status of servers and services can be grasped, while the log DB 1 and log information analysis tools 2 are expensive to install. There is a problem that is excessively burdensome to use on the website.

The second method is shown in Fig. 2, which can reduce the economic burden of the first method, and the web server (w) operator does not directly install and operate the log analysis system. It is a system that ASP installs and analyzes log information in connection with an ASP service (application service provider 9) that specializes in log analysis, and pays a predetermined price for it. Referring to this in more detail with reference to Figure 2, when the client (c) is connected to the web server (w) via the Internet, the log information is left in the web server (w) and the log information through the log agent program (3) It is transmitted to the ASP server 9 according to a predetermined schedule, stored in the log DB 4, analyzed by the log analysis program 5 of the ASP server 9, and provided to the web server w.

In such a system, the problem of high cost in log analysis can be solved to some extent, whereas the log DB 4 is not in the web server w, and the ASP server cannot be controlled by the web server w. Since it exists in a), there is a risk that log information can be leaked to the outside.

The present invention has been made to solve the above problems in the log analysis system used in the prior art, the object of the present invention is to analyze the log information at a low cost while fear of leakage of the log information to the outside In other words, it provides a method of analyzing log information on the Internet that combines economy and security.

1 is a system configuration of one prior art according to the present invention

Figure 2 is a system configuration of another prior art according to the present invention

3 is a system configuration diagram of a preferred embodiment of the present invention.

4 is a process flow diagram of a preferred embodiment of the present invention.

<Description of Major Reference Drawings>

10 clients, 15 internet, 20 web server, 30 web server manager, 40 ASP server

Summary of the Invention

The present invention provides a method for analyzing log information of visitors in a web server on the Internet, the method comprising: leaving log information in the web server when the visitor accesses a website; Storing the log information in a log DB by an agent program of a web server; Requesting a web server administrator to download a log analysis program to an ASP server through the Internet; Downloading, by the ASP server, the log analysis program to the web server administrator computer after authentication; The web server administrator includes a step of analyzing and storing log information stored in a log DB using a log analysis program.

The log analysis program downloaded by the web server administrator may be used only after authentication of the ASP server.

In the log information analysis step, the behavior of the user may be analyzed by calculating the number of visitors and page views of the website or mapping the login user and the website page.

Example

Hereinafter, a preferred embodiment of a method for analyzing log information on the Internet according to the present invention will be described with reference to the accompanying drawings. 3 is a system configuration diagram of the present embodiment, and FIG. 4 is a procedure flowchart.

As shown in Fig. 3, a plurality of Internet users (client, 10), web server 20 and ASP server 40 are connected on the Internet 15 to constitute this embodiment. The web server 20 is a large computer system that provides various information or services according to a client's request on the Internet. The web server 20 is a communication interface 21, a CPU 23, an OS 5, a web program 27, and a log agent program ( 29), a log DB 24, and a web page 26. In addition, a main memory (RAM), an auxiliary memory device, and the like are basically included. The web server 20 provides various information and services at the request of the client 10, and under the control of the CPU 23, the web program 27 displays the web page 26 with the web browser of the client 10. This is done by displaying through.

The log agent program 29 collects log information left by the client 10 by accessing the web server 20 and stores the log information in the log DB 24 according to a schedule. The log DB 24 may be installed in the web server 20, but may be configured as a separate log server. The web page 26 is responsible for the interface with the client 10. The web server manager 30 manages the web server 20. In the present invention, the web server manager 30 mainly analyzes log information of the web server 20.

The ASP server 40 is a server that provides services such as the sale or rental of various application programs on the Internet, and means a server that rents a log analysis program in the present invention. The ASP server 40 includes a communication interface 41, a CPU 43, an OS 45, a web program 47, a log analysis program module 49, an authentication module 42, a web page 46, and the like. In addition, it is configured to include a main memory and an auxiliary memory.

4 is a flowchart illustrating a method of analyzing log information on the Internet according to the present invention. Each step will be described in detail as follows.

When the Internet user (client) 10 accesses the web server 20 [S1], the log information of the client 10 is automatically left in the web server 20 [S2]. The log information remains in the form of a file, the type of which varies by server type. Types of log files include Access / Transfer log files containing general access information, error log files containing information about all errors and connection failures occurring on the web server, and the web browser and OS used by the client. There are agent log files that contain information about them.

The log information remaining in the web server 20 is collected by the log agent program 29 of the web server 20 and transmitted to the log DB 24 at regular intervals and stored [S3]. The period may vary depending on the amount of log information.

Web server manager 30 is connected to the ASP server 40 in order to analyze the log information of the web server 20 and requests the download of the log analysis program 49 [S4]. The ASP server 40 determines whether the web server administrator 30 who has applied for the download of the log analysis program 49 has the right authority through the authentication procedure [S5]. The authentication procedure is performed by the authentication module 42 and may use a conventional authentication method such as password or fingerprint authentication.

If it is determined by the authentication procedure [S5] that the web server administrator 30 has the legitimate authority, the log analysis program {S6] is downloaded to the computer of the web server administrator 30 [S6]. When the web server manager 30 analyzes and stores log information stored in the log DB 24 using the downloaded log analysis program S6 [S7], the procedure is sorted. When the web server manager 30 wishes to reuse the log analysis program downloaded by the web server manager 30, it is preferable to perform technical processing so that the web server manager 30 can use the log analysis program only after authentication of the ASP server 40.

In the log information analysis step, the behavior of the user may be analyzed by calculating the number of visitors and page views of the website or by mapping the login user with the website page.

In the above described with reference to an embodiment of the log information analysis method on the Internet according to the present invention, the scope of the present invention is not limited to the described embodiment should not be interpreted. The technical scope of the invention should be determined by reasonable interpretation of the claims.

According to the present invention, there is no risk of leaking log information to the outside by installing a log DB on a web server, and a log analysis program can be analyzed at a low cost by renting a log analysis program whenever a log analysis is required. There is an effect that can provide a log information analysis method on the Internet with more economical and secure. Furthermore, there is no need to transmit very large log files over the network for log analysis, which can reduce the load on the network and speed up log analysis.

Claims (4)

In the method of analyzing the log information of the visitor in a web server on the Internet, Leaving log information on the web server when the visitor accesses the website, Storing the log information in a log DB by an agent program of a web server; The web server administrator applies for downloading the log analysis program to the ASP server through the Internet, After authentication, the ASP server downloads the log analysis program to the web server administrator computer. A web server administrator comprising a step of analyzing and storing log information stored in the log DB using a log analysis program. The method of claim 1, The log analysis program downloaded by the web server administrator can be used only after authentication of the ASP server. The method of claim 1, In the log information analysis step, the log information analysis method on the Internet, characterized in that to calculate the number of visitors and page views of the website. The method of claim 1, In the log information analysis step, the log information analysis method on the Internet, characterized in that for analyzing the behavior of the user through the mapping between the login user and the website page.