ACCESS LOG ANALYSIS DEVICE AND ACCESS LOG ANALYSIS METHOD

PROBLEM TO BE SOLVED: To acquire an executed process flow and a degree of certainty of occurrence of the flow from a log of a target system without changing an application or the like.SOLUTION: An access log analysis device 600 is for use in an information system that includes: an application server 200; a user terminal 100 for transmitting a processing request to the server; and a database 300 for returning a response to an inquiry from the server. The device includes: a packet management part for storing a communication packet consisting of the processing request, inquiry and response; a processing request mapping candidate process part for calculating a degree of certainty of occurrence of the processing requests, for each of the inquiries, with regard to a series of patterns of the inquiries that are called from the individual processing requests for a predetermined period; an inquiry pattern candidate process part having functionality for calculating a degree of certainty of the inquiry pattern candidate from the inquiry called by each of the processing requests; and a screen drawing process part for displaying the processing request and the inquiry candidate in correlation with each other.