Operation log analysis system, operation log analysis program, and operation log analysis method

Abstract

An operation log analysis system (4) comprises: an operation log analysis unit (13) that analyzes an operation log indicating the details of operation by a user in an analysis tool (3) that analyzes an analysis subject signal obtained from a subject (1) being monitored; an operation log analysis result storage unit (14) that stores an operation log analysis result, which is the analysis result of the operation log analysis unit (13); an analysis subject signal information storage unit (15) that stores analysis subject signal information indicating the relationship between the subject (1) being monitored and the analysis subject signal; and an operation log analysis result visualization unit (16) that visualizes, by using the operation log analysis result and the analysis subject signal information, the operation log analysis result, including information indicating correspondence with the subject (1) being monitored.

Description

Operation Log Analysis System, Operation Log Analysis Program, and Operation Log Analysis Method

[0001] The present disclosure relates to an operation log analysis system, an operation log analysis program, and an operation log analysis method for analyzing operation logs of an analysis tool.

[0002] Conventionally, when an abnormality occurs in a monitoring target, measurement value data obtained from the monitoring target is collected and analyzed using techniques such as statistical analysis to estimate the cause of the abnormality. By estimating the cause of the abnormality, there is a possibility of early detection of an abnormal state from the measurement value data when a similar abnormality occurs next. For abnormalities for which a detection method has not been established, the user needs to manually analyze the cause of the abnormality, and when discriminating the cause from a huge amount of data, high analytical power and a lot of labor are required.

[0003] In response to such problems, Patent Document 1 discloses a technology for a plant operation support device that reduces the user's load in analysis processing. The plant operation support device in Patent Document 1 creates and displays guidance for visualizing the user's analysis processing based on the signal that the user has focused on. By checking the guidance, the user can easily grasp the situation of the perspective from which the analysis processing was to be advanced, improve the comprehensiveness of the analysis, and avoid duplication of work in the analysis processing.

[0004] International Publication No. 2023 / 067702

[0005] However, according to the above conventional technology, the guidance only visualizes the user's operation procedure in a branching format. Therefore, there is a problem that the relationship between the signal that the user has focused on and the monitoring target cannot be read from the guidance, and the intention of the user's analysis processing cannot be grasped.

[0006] The present disclosure has been made in view of the above, and an object is to obtain an operation log analysis system capable of visualizing the analysis result of an operation log indicating the user's operation in an analysis tool that analyzes an analysis target signal from a monitoring target, including information showing the correspondence with the monitoring target.

[0007] To solve the above-mentioned problems and achieve the objectives, the operation log analysis system disclosed herein is characterized by comprising: an operation log analysis unit that analyzes operation logs showing the user's operations on an analysis tool that analyzes an analysis target signal obtained from a monitored target; an operation log analysis result storage unit that stores the operation log analysis results, which are the analysis results of the operation log analysis unit; an analysis target signal information storage unit that stores analysis target signal information showing the relationship between the monitored target and the analysis target signal; and an operation log analysis result visualization unit that visualizes the operation log analysis results, including information showing the correspondence with the monitored target, using the operation log analysis results and the analysis target signal information.

[0008] The operation log analysis system disclosed herein has the effect of being able to visualize the analysis results of operation logs that show the user's operations in the analysis tool that analyzes the target signals from the monitored target, including information that shows the correspondence with the monitored target.

[0009]

[0010] The operation log analysis system, operation log analysis program, and operation log analysis method according to embodiments of this disclosure will be described in detail below with reference to the drawings.

[0011] Embodiment 1. Figure 1 shows an example of the configuration of the operation log analysis system 4 according to Embodiment 1. The operation log analysis system 4 is a system that analyzes the operation log, which shows the user's analysis processing in the analysis tool 3 that analyzes the analysis target signal obtained from the monitored target 1, that is, the user's operations on the analysis tool 3.

[0012] Monitoring target 1 includes not only artificial objects such as plant systems that combine multiple pieces of equipment and machinery, but also natural elements such as rivers. The signal to be analyzed is a signal obtained from monitoring target 1, and may be a signal that monitoring target 1 can measure directly, or a signal measured by sensors installed in conjunction with monitoring target 1. For example, if monitoring target 1 is a plant system, the signal to be analyzed may be measured values ​​such as the amount of electricity used in the electrical equipment, the pressure at a certain point on the equipment through which gases flow, or the temperature at a certain point, but is not limited to these. Also, if monitoring target 1 is a river, the signal to be analyzed may be measured values ​​of the water level measured at a certain point, but is not limited to this. The type of signal to be analyzed obtained from monitoring target 1 does not matter as long as it can be analyzed by analysis tool 3.

[0013] The analysis target signal storage unit 2 is a storage unit that stores the analysis target signals obtained from the monitoring target 1. Figure 2 is a diagram showing an example of analysis target signals stored in the analysis target signal storage unit 2 according to Embodiment 1. The analysis target signal storage unit 2 stores the measured value of each analysis target signal, i.e., the signal value of each analysis target signal, for each time measured by the monitoring target 1, etc. Depending on the monitoring target 1, the analysis target signal storage unit 2 may be installed in conjunction with the monitoring target 1, or it may be installed in conjunction with the analysis tool 3. The analysis target signal storage unit 2 may also exist in a form such as on the cloud. Although not shown in the diagram, the analysis target signal storage unit 2 can also store analysis target signals obtained from multiple monitoring targets 1.

[0014] The analysis tool 3 acquires the signal to be analyzed from the signal to be analyzed storage unit 2 and performs analysis processing on the signal to be analyzed in response to user input. If the signal to be analyzed storage unit 2 stores the signals to be analyzed for multiple monitoring targets 1, the analysis tool 3 can perform analysis processing on the signals to be analyzed for multiple monitoring targets 1. The analysis tool 3 may perform analysis of the signal to be analyzed using methods such as statistical analysis in response to user input, or it may simply graph and display the signal to be analyzed selected by the user. The analysis tool 3 may be an existing BI (Business Intelligence) tool. If the measurement times differ for each signal to be analyzed, the analysis tool 3 may perform interpolation processing such as linear interpolation to synchronize the acquisition times of each signal to be analyzed. The analysis tool 3 may be a dedicated device or a personal computer with analysis software installed. Here, the analysis tool 3 is configured to output operation log information indicating the content of the operations received from the user to an external source. Analysis tool 3 is acceptable as long as it can perform data analysis using graphs such as line graphs and scatter plots on time-series data signals and output operation logs externally. Therefore, the name is not particularly important and can be anything from an anomaly cause analysis support system, anomaly sign detection system, equipment diagnostic system, or maintenance system.

[0015] Figure 3 shows an example of analysis processing in the analysis tool 3 according to Embodiment 1. The analysis tool 3 acquires a desired signal to be analyzed from the signal storage unit 2 based on selection by the user, and may display a graph in parallel so that the signal values ​​of two signals to be analyzed, in this case signals A and B, can be compared, as shown in Figure 3(a), or it may display a scatter plot of signals A and B, as shown in Figure 3(b). The analysis tool 3 may also accept from the user the period during which the signal to be analyzed to be used for display was obtained, as shown in Figure 3(c), and may change the display content shown in Figure 3(a) or Figure 3(b) according to the period accepted by the user. Depending on the type of signal to be analyzed, the analysis tool 3 can display the signal to be analyzed using various methods such as bar graphs and bubble charts. The analysis tool 3 may display Figure 3(c) together with Figure 3(a) or Figure 3(b), or it may display Figures 3(a) to 3(c) simultaneously.

[0016] The configuration and operation of the operation log analysis system 4 will now be described. As shown in Figure 1, the operation log analysis system 4 comprises an operation log collection unit 11, an operation log storage unit 12, an operation log analysis unit 13, an operation log analysis result storage unit 14, an analysis target signal information storage unit 15, and an operation log analysis result visualization unit 16.

[0017] The operation log collection unit 11 collects operation logs from the analysis tool 3 that show the user's operations on the analysis tool 3, which analyzes the target signal obtained from the monitored object 1. The operation log collection unit 11 stores the collected operation logs in the operation log storage unit 12. The operation log storage unit 12 is a storage unit that stores the operation logs collected by the operation log collection unit 11. The operation log collection unit 11 and the operation log storage unit 12 may be included in the analysis tool 3 depending on the environment in which the analysis tool 3 and the operation log analysis system 4 are installed.

[0018] Figure 4 shows an example of an operation log stored in the operation log storage unit 12 of the operation log analysis system 4 according to Embodiment 1. For example, the first operation log shown in Figure 4 indicates the operation performed by the user in the analysis tool 3 at 09:00:00 to display a scatter plot using signals A and B on the display unit of the analysis tool 3. Such operation log information is stored in chronological order in the operation log storage unit 12.

[0019] The operation log analysis unit 13 reads the operation log from the operation log storage unit 12 and analyzes the operation log. For example, as a method of analyzing the operation log, the operation log analysis unit 13 classifies the operation log by at least one of the following: the target signal to be analyzed displayed by the analysis tool 3, and the method of displaying the target signal when it was displayed by the analysis tool 3. The operation log analysis unit 13 can analyze in common which target signal the user of the analysis tool 3 was focusing on, that is, which target signal the user of the analysis tool 3 displayed on the analysis tool 3, even if the display method in the analysis tool 3 is different, such as line graphs or bar graphs. This makes it possible for users of the operation log analysis system 4 to compare the analysis results of operation logs even if they are from different analysis tools 3. The operation log analysis unit 13 stores the operation log analysis results, which are the analysis results, in the operation log analysis result storage unit 14. The operation log analysis result storage unit 14 is a storage unit that stores the operation log analysis results, which are the analysis results of the operation log analysis unit 13.

[0020] Figure 5 is the first figure showing an example of operation log analysis results stored in the operation log analysis result storage unit 14 of the operation log analysis system 4 according to Embodiment 1. From the example in Figure 5, it can be seen that the user of the analysis tool 3 performed analysis processing targeting signals A and B as analysis targets until 09:00:03, although the display method was changed, and from 09:00:03 onwards, signal C was displayed in addition to signals A and B as analysis targets. In Figure 5, the content at 09:00:03, based on the content in Figure 4, indicates that the user of the analysis tool 3 pressed button A on the analysis tool 3, and as a result, a bar graph of signal C was displayed on the analysis tool 3. In Figure 5, the content at 09:00:04, based on the content in Figure 4, indicates that the user of the analysis tool 3 slid the scroll bar A on the analysis tool 3, causing the content of the analysis tool 3 screen to scroll, and line graphs of signals D and E were displayed in parallel on the analysis tool 3.

[0021] Furthermore, the operation log analysis unit 13 may analyze the operation log not only in chronological order, but also in units of a defined period. Figure 6 is a second diagram showing an example of operation log analysis results stored in the operation log analysis result storage unit 14 of the operation log analysis system 4 according to Embodiment 1. In Figure 6, Figure 6(a) is the same as Figure 5 described above. The operation log analysis unit 13 can also aggregate, i.e., convert, the operation log analysis results in 1-second units shown in Figure 6(a) into operation log analysis results in 1-minute units shown in Figure 6(b). In this case, the operation log analysis unit 13 may discard the operation log analysis results in Figure 6(a), or it may store the two operation log analysis results in Figure 6(a) and Figure 6(b) in the operation log analysis result storage unit 14.

[0022] The analysis target signal information storage unit 15 is a storage unit that stores analysis target signal information indicating the relationship between the monitoring target 1 and the analysis target signal. The analysis target signal information includes information such as the measurement location at the monitoring target 1 where the analysis target signal was measured, the measuring equipment included in the monitoring target 1, the location of the measuring equipment at the monitoring target 1, the type of measurement item, and the name of the analysis target signal. Furthermore, if the monitoring target 1 is a river or the water level at a specified point in the river can be obtained as the analysis target signal, the analysis target signal information may also include information on the order in which the analysis target signals are arranged, showing the aforementioned specified points in the river in order from upstream or downstream. In addition, the analysis target signal information may include information such as a diagram or image showing the configuration of the monitoring target 1 used to display the measurement location at the monitoring target 1 where the analysis target signal was measured on the screen.

[0023] Figure 7 is a first diagram showing an example of the signal information to be analyzed stored in the signal information storage unit 15 of the operation log analysis system 4 according to Embodiment 1. Figure 7(a) is information such as a drawing or image showing the location of the equipment where the signal to be analyzed is measured when the monitored object 1 is a plant system or the like. Figure 7(a) shows that a certain substance flows through valve A and tank A to valve B and tank B, and valve C and tank C. Figure 7(b) is information showing the relationship between the monitored object 1 and the signal to be analyzed. Figure 7(b) further includes information showing the position and size of each valve and each tank on the screen when the operation log analysis system 4 visualizes the monitored object 1 shown in Figure 7(a). As a result, the operation log analysis result visualization unit 16 can also use the drawing or image shown in Figure 7(a) when visualizing the operation log analysis results.

[0024] Figure 8 is a second diagram showing an example of the analysis target signal information stored in the analysis target signal information storage unit 15 of the operation log analysis system 4 according to Embodiment 1. Figure 8(a) is information indicating the equipment, etc., on which the analysis target signal is measured when the monitoring target 1 is a building A, such as a building. For example, the analysis target signal 7th floor_power_air conditioning, indicated by id1 in Figure 8(a), indicates the power consumption of the air conditioning equipment installed on the 7th floor of building A, which is the monitoring target 1. Figure 8(b) is information showing the relationship between each analysis target signal. For example, it shows that the connection relationship between the analysis target signal 7th floor_power_air conditioning, indicated by id1 in Figure 8(a), and the analysis target signal 6th floor_power_air conditioning, indicated by id2 in Figure 8(a), is undirected. Figure 8(c) is a diagram showing the layout of building A, which is the monitoring target 1. Figure 8(c) is information corresponding to Figure 7(a) described above. Although not shown in Figure 8, in practice, when visualizing the operation log analysis results, the diagrams or images shown in Figure 8(c) are used, and therefore, information such as the position and size on the screen shown in Figure 7(b) is included in the signal information to be analyzed.

[0025] The operation log analysis system 4 has a defined analysis tool 3 that is the target of the operation log analysis, and the analysis tool 3 also has a defined monitoring target 1 from which the target signal for analysis can be obtained. Therefore, in the operation log analysis system 4, the analysis target signal information storage unit 15 is pre-stored with analysis target signal information indicating the relationship between the monitoring target 1 and the analysis target signal, provided by the user, such as the operation log analysis system 4, the analysis tool 3, and the monitoring target 1.

[0026] The operation log analysis result visualization unit 16 visualizes the operation log analysis results, including information showing the correspondence with the monitored target 1, using the operation log analysis results stored in the operation log analysis result storage unit 14 and the analyzed signal information stored in the analyzed signal information storage unit 15.

[0027] Figure 9 is the first diagram showing an example of visualization of operation log analysis results in the operation log analysis result visualization unit 16 of the operation log analysis system 4 according to Embodiment 1. In Figure 9, the relationship between the analyzed signal obtained and the monitored object 1 is shown when the monitored object 1 is a plant system or the like. Figure 9(a) is a diagram showing the period over which the analyzed signals for valve A, tank A, valve B, and tank B shown in Figure 7 were displayed in the analysis tool 3. Figure 9(b) is a diagram showing an example of the analyzed signals within the range selected in Figure 9(a) being superimposed on the drawing or image shown in Figure 7(a).

[0028] In Figure 9(b), the positions of the circles indicate the measurement location of the signal to be analyzed on monitoring target 1, the equipment being measured, etc., and the size of the circles indicates the length of time the signal to be analyzed selected in Figure 9(a) was displayed. In other words, the larger the circle, the longer the time the signal to be analyzed was displayed in analysis tool 3. In Figure 9(b), the lines connecting the circles indicate the signals to be analyzed that were displayed simultaneously in analysis tool 3. In Figure 9(b), the thickness of the lines connecting the circles indicates the total period during which the connected signals to be analyzed were displayed simultaneously in analysis tool 3, the number of times they were displayed simultaneously, etc. The longer the period of simultaneous display or the more times they were displayed, the thicker the line. Regarding the method of displaying the circles in Figure 9(b), only an outline is sufficient, or they can be filled in to allow the background image to show through. Note that in Figure 9(b), the shape representing the signal to be analyzed is a circle, but other shapes, such as squares or triangles, may also be used. Furthermore, depending on the equipment targeted by the signal to be analyzed, for example, in Figure 9(b), the shape representing the signal to be analyzed may be changed for valves and tanks.

[0029] The operation log analysis result visualization unit 16 receives operations from the user of the operation log analysis system 4 and appropriately changes the selection range shown in Figure 9(a), thereby appropriately changing the display in Figure 9(b) in conjunction with the selection range in Figure 9(a). The operation log analysis result visualization unit 16 may visualize Figure 9(a) and Figure 9(b) simultaneously, or visualize only one of them at the user's discretion. The operation log analysis result visualization unit 16 may change the display patterns such as color and pattern for the circles and lines shown in Figure 9(b) to indicate the display order in the analysis tool 3.

[0030] In this way, the operation log analysis result visualization unit 16, as a method of visualizing the operation log analysis results, superimposes information showing the user's operation status with the analysis tool 3 on the screen showing the monitored target 1. That is, the operation log analysis result visualization unit 16 visualizes the operation log analysis results including information showing the correspondence with the monitored target 1. As a result, the operation log analysis result visualization unit 16 visualizes what kind of operation procedures, attention time, etc., the user of the operation log analysis system 4 can grasp the analyzed target signals that the user of the analysis tool 3 is also frequently looking at. For example, the user of the operation log analysis system 4 can see that the user of the analysis tool 3 is using an analysis method in which they look at the whole picture for a short time, then narrow down the target analyzed signal, and then look at the narrowed-down analyzed signal for a long time. Furthermore, the user of the operation log analysis system 4 can see that the user of the analysis tool 3 is performing analysis methods such as looking at the analysis target signal from upstream to downstream when some substance is flowing in the monitored object 1, looking at the upstream analysis target signal and the downstream analysis target signal alternately, and looking at the valve opening / closing signal and then looking at the tank water level signal.

[0031] The display unit that actually visualizes the operation log analysis results in the operation log analysis results visualization unit 16 may be included in the operation log analysis results visualization unit 16, or it may be provided by the operation log analysis system 4, although this is omitted from Figure 1. The operation log analysis results visualization unit 16 may also output information for visualizing the operation log analysis results to an external device, etc., which is not shown. Furthermore, if the operation log analysis system 4 is implemented by installing software on a personal computer, the operation log analysis system 4 may use the personal computer's monitor as the display unit. Thus, the operation log analysis system 4 can also use a display unit that is not a dedicated display unit for visualizing the operation log analysis results.

[0032] Figure 10 is a second diagram showing an example of visualization of operation log analysis results in the operation log analysis result visualization unit 16 of the operation log analysis system 4 according to Embodiment 1. Figure 10(a) shows the order of analysis target signals displayed on the analysis tool 3 by the user of the analysis tool 3 superimposed on the diagram or image of Figure 8(c). Figure 10(b) shows the order of analysis target signals displayed on the analysis tool 3 by the user of the analysis tool 3 for a certain day's electricity consumption. In Figures 10(a) and 10(b), the display period for each analysis target signal is represented by the size of the rectangle containing each number.

[0033] The operation log analysis result visualization unit 16 performs this visualization, allowing the user of the operation log analysis system 4 to see that the user of the analysis tool 3 performed the analysis in the following steps, gradually narrowing down the target signals, periods, etc. 1. The user of the analysis tool 3 checks the total daily power consumption of building A for a short time. 2. The user of the analysis tool 3 compares and displays the daily power consumption of each floor of building A over a longer period than in step 1. 3. The user of the analysis tool 3 compares and displays the daily power consumption of the 7th floor of building A by usage, namely outlets, air conditioning, and lighting, over a longer period than in step 1, and about the same period as in step 2. 4. The user of the analysis tool 3 analyzes the morning power consumption of the air conditioning on the 7th floor of building A over a longer period than in steps 2 and 3.

[0034] The operation log analysis result visualization unit 16 visualizes the operation log analysis results using the signal information to be analyzed, making it possible to visualize what kind of operation procedures and attention times the user of the analysis tool 3 performed with respect to the physical positional relationship of the signal to be analyzed at the monitored object 1 where the signal to be analyzed was measured, the type of signal to be analyzed, the purpose of the signal to be analyzed, the temporal connection, the degree of temporal aggregation, and the temporal range. The type of signal to be analyzed includes temperature and energy consumption. The purpose of the signal to be analyzed includes outlet energy consumption, air conditioning energy consumption, and lighting energy consumption. Temporal connection includes days of the week, time of day, and date. The degree of temporal aggregation includes the total for one day and the total for each hour. The temporal range includes the display for one day and the display for one hour. In this way, as shown in Figure 10, the operation log analysis result visualization unit 16 can visualize the signals to be analyzed that were simultaneously displayed on the analysis tool 3. This allows the user of the operation log analysis system 4 to see the signals to be analyzed that the user of the analysis tool 3 was frequently looking at at the same time.

[0035] Figure 11 is a third figure showing an example of visualization of operation log analysis results in the operation log analysis result visualization unit 16 of the operation log analysis system 4 according to Embodiment 1. As shown in Figure 11(a), the operation log analysis result visualization unit 16 may change the combination of analysis target signals superimposed on the image of the monitored object 1 depending on the time, time period, etc. Also, as shown in Figure 11(b), the operation log analysis result visualization unit 16 may display the analysis target signals superimposed on the image of the monitored object 1 in a way that shows the display period in the analysis tool 3. Note that the "image" shown in Figures 11(a) and 11(b) corresponds to Figure 7(a), etc., and may be a drawing.

[0036] Figure 12 is a fourth figure showing an example of visualization of operation log analysis results in the operation log analysis result visualization unit 16 of the operation log analysis system 4 according to Embodiment 1. The operation log analysis result visualization unit 16 may also display the order in which the analysis target signals are displayed in the analysis tool 3, as shown in Figures 12(a) and 12(b). Figure 12(a) shows a situation in which the user of the analysis tool 3 is gradually narrowing down the number of analysis target signals to be displayed in the analysis tool 3, and the period in which the analysis target signals were obtained, with signals A to F being the analysis target signals. Figure 12(b) shows a situation in which the user of the analysis tool 3 first displays signal B as the analysis target signal to be displayed in the analysis tool 3, and then displays signals A and C, which have shorter periods than signal B.

[0037] The operation log analysis result visualization unit 16 visualizes the operation log analysis results using the analysis target signal information, and by simultaneously displaying the spatial and temporal positioning of the analysis target signal, it is possible to visualize what kind of operation procedures and attention times the user of the analysis tool 3 performed. Furthermore, as shown in Figures 11 and 12, the operation log analysis result visualization unit 16 can visualize the analysis target signals that were simultaneously displayed on the analysis tool 3. This allows the user of the operation log analysis system 4 to understand which analysis target signals the user of the analysis tool 3 was frequently looking at at the same time. In the example in Figure 12(a), the user of the operation log analysis system 4 can see that the user of the analysis tool 3 first looked at the entire period and analysis target signals, narrowed down the period first, and then narrowed down the analysis target signals. Also, in the example in Figure 12(b), the user of the operation log analysis system 4 can see that the user first displayed signal B as the analysis target signal to narrow down the period, and then checked signals A and C before and after signal B.

[0038] Figure 13 is a fifth figure showing an example of visualization of operation log analysis results in the operation log analysis result visualization unit 16 of the operation log analysis system 4 according to Embodiment 1. The operation log analysis result visualization unit 16 may display the combinations of signals A to D, which are the analysis target signals that the user of the analysis tool 3 was simultaneously viewing, as shown in Figure 13(a) or Figure 13(b). In Figure 13(b), the frequency of each combination of analysis target signals that the user of the analysis tool 3 was simultaneously viewing can also be represented by the thickness of the lines connecting each analysis target signal.

[0039] The operation log analysis result visualization unit 16 visualizes the operation log analysis results using the analysis target signal information, thereby displaying the relationships between the analysis target signals and making it possible to visualize what kind of operation procedures and attention time the user of the analysis tool 3 performed. Furthermore, in the example of Figure 13, the operation log analysis result visualization unit 16 can also visualize the analysis target signals that were simultaneously displayed on the analysis tool 3. The visualization shown in Figure 13 makes it easier for the user of the operation log analysis system 4 to perform analysis on the analysis target signals that are displayed together at the same time.

[0040] Figure 14 is the sixth figure showing an example of visualization of operation log analysis results in the operation log analysis result visualization unit 16 of the operation log analysis system 4 according to Embodiment 1. As described above, the operation log analysis unit 13 classifies the operation log according to the signal to be analyzed and the display method. Therefore, the operation log analysis result visualization unit 16 can visualize the differences in the analysis processing procedures performed by each user based on the operation log analysis results, even when the users of the analysis tool 3 are different.

[0041] As shown in Figure 14, user A of analysis tool 3 first briefly checks the target signals in the order of signal A, signal B, signal C, and signal D, then briefly checks the target signals in the order of signal C, signal B, and signal A, and as a result selects signals A and B for long-term consideration. During this time, user A displays the target signals in analysis tool 3 using a line graph. On the other hand, user B of analysis tool 3 first checks the combination of signals A and B, then the combination of signals A and C, and then the combination of signals A and D, and as a result selects signals A and B for long-term consideration. At this time, user B displays the target signals in analysis tool 3 using a scatter plot when checking combinations of signals, but after selecting signals A and B, displays the signals in analysis tool 3 using both a scatter plot and a line graph. As shown in Figure 14, user A uses a line graph, and user B uses a scatter plot, so the display methods of user A and user B are different. However, it can be seen that both User A and User B followed the same procedure: first, they displayed all the signals to be analyzed, and then they focused on signals A and B for analysis.

[0042] As shown in Figure 14, the operation log analysis result visualization unit 16 visualizes the data, allowing users of the operation log analysis system 4 to compare differences in the analysis processing procedures for each user of the analysis tool 3, even if the display method, the analysis target signals displayed in the analysis tool 3, and the order of the analysis target signals displayed in the analysis tool 3 differ. By reviewing the contents of Figure 14, users A and B can recognize that there are analysis processing methods different from their own, which can be used as a reference for adopting new analysis methods. In order for the operation log analysis result visualization unit 16 to perform visualization as shown in Figure 14, it is necessary to be able to identify whether the operation log of the analysis target signal in the analysis tool 3 was performed by user A or user B. In such a case, for example, when each user uses the analysis tool 3, they input identification information, a password, etc., to the analysis tool 3 before use to identify themselves. This allows the analysis tool 3 to output operation logs linked to user information.

[0043] Although various visualization methods by the operation log analysis result visualization unit 16 have been described, the visualization method by the operation log analysis result visualization unit 16 is not limited to the above examples. For example, when the analysis target signal information storage unit 15 stores information on the display format in the analysis tool 3 as the analysis target signal information, the operation log analysis result visualization unit 16 can perform visualization to reproduce the display screen in the analysis tool 3 as a visualization method. Also, the operation log analysis result visualization unit 16 does not need to correspond to all the visualization methods described above, and it only needs to correspond to the necessary visualization methods according to the purpose, application, etc.

[0044] FIG. 15 is a flowchart showing the operation of the operation log analysis system 4 according to Embodiment 1. In the operation log analysis system 4, the operation log collection unit 11 collects an operation log from the analysis tool 3 (step S1). The operation log collection unit 11 stores the collected operation log in the operation log storage unit 12. The operation log storage unit 12 stores the operation log (step S2). The operation log analysis unit 13 reads the operation log from the operation log storage unit 12 and analyzes the operation log (step S3). The operation log analysis unit 13 stores the operation log analysis result in the operation log analysis result storage unit 14. The operation log analysis result storage unit 14 stores the operation log analysis result (step S4). The operation log analysis result visualization unit 16 reads the operation log analysis result from the operation log analysis result storage unit 14 and reads the analysis target signal information from the analysis target signal information storage unit 15. The operation log analysis result visualization unit 16 visualizes the operation log analysis result including information indicating the correspondence relationship with the monitoring target 1 by using the read operation log analysis result and analysis target signal information (step S5).

[0045] Next, the hardware configuration of the operation log analysis system 4 according to Embodiment 1 will be described. In the operation log analysis system 4, the operation log storage unit 12, the operation log analysis result storage unit 14, and the analysis target signal information storage unit 15 are memories. The operation log collection unit 11, the operation log analysis unit 13, and the operation log analysis result visualization unit 16 are implemented by processing circuits. The processing circuit may be a memory for storing programs and a processor for executing programs stored in memory, or it may be dedicated hardware. The processing circuit is also called a control circuit.

[0046] Figure 16 shows an example of the configuration of a processing circuit 90 when the processing circuit for realizing the operation log analysis system 4 according to Embodiment 1 is realized by a processor 91 and a memory 92. The processing circuit 90 shown in Figure 16 is a control circuit and comprises a processor 91 and a memory 92. When the processing circuit 90 is composed of a processor 91 and a memory 92, each function of the processing circuit 90 is realized by software, firmware, or a combination of software and firmware. The software or firmware is written as a program and stored in the memory 92. In the processing circuit 90, each function is realized by the processor 91 reading and executing the program stored in the memory 92. That is, the processing circuit 90 includes a memory 92 for storing a program that will ultimately be executed as a result of the processing of the operation log analysis system 4. This program can also be said to be a program that causes the operation log analysis system 4 to execute each function realized by the processing circuit 90. This program may be provided by a storage medium on which the program is stored, or by other means such as a communication medium.

[0047] Here, the processor 91 is, for example, a CPU (Central Processing Unit), a processing device, an arithmetic device, a microprocessor, a microcomputer, or a DSP (Digital Signal Processor), etc. Also, the memory 92 is, for example, a non-volatile or volatile semiconductor memory such as a RAM (Random Access Memory), a ROM (Read Only Memory), a flash memory, an EPROM (Erasable Programmable ROM), an EEPROM (registered trademark) (Electrically EPROM), a magnetic disk, a flexible disk, an optical disk, a compact disk, a mini disk, or a DVD (Digital Versatile Disc), etc.

[0048] FIG. 17 is a diagram showing an example of the configuration of a processing circuit 93 when the processing circuit for realizing the operation log analysis system 4 according to Embodiment 1 is realized by dedicated hardware. The processing circuit 93 shown in FIG. 17 corresponds to, for example, a single circuit, a composite circuit, a programmed processor, a parallel-programmed processor, an ASIC (Application Specific Integrated Circuit), an FPGA (Field Programmable Gate Array), or a combination thereof. For the processing circuit 93, a part may be realized by dedicated hardware and a part may be realized by software or firmware. Thus, the processing circuit 93 can realize each of the above functions by dedicated hardware, software, firmware, or a combination thereof.

[0049] Although the description is omitted, the operation log analysis systems described in Embodiments 2 and later also have the same hardware configuration as the operation log analysis system 4 of Embodiment 1.

[0050] As described above, according to this embodiment, in the operation log analysis system 4, the operation log analysis unit 13 analyzes the operation log showing the user's operations in the analysis tool 3 that analyzes the target signal obtained from the monitored target 1. The operation log analysis result visualization unit 16 visualizes the operation log analysis results, including information showing the correspondence with the monitored target 1, using the operation log analysis results and the target signal information showing the relationship between the monitored target 1 and the target signal. As a result, the user of the operation log analysis system 4 can confirm the operations performed by the user of the analysis tool 3 when analyzing the target signal, including information about the monitored target 1. The user of the operation log analysis system 4 can easily grasp the intention of the user of the analysis tool 3's analysis processing because they can read the relationship between the target signal that the user of the analysis tool 3 focused on and the monitored target 1. Furthermore, the user of the operation log analysis system 4 can perform analysis efficiently by selecting a desired visualization method from various visualization methods provided by the operation log analysis result visualization unit 16 according to the purpose of the analysis. Thus, the operation log analysis system 4 can visualize the operation log analysis results showing the user's operations in the analysis tool 3, which analyzes the target signal from the monitored object 1, including information showing the correspondence with the monitored object 1. The operation log analysis system 4 can improve the accuracy of the operation log analysis showing the user's operations in the analysis tool 3.

[0051] Embodiment 2. In Embodiment 1, it was assumed that the information to be analyzed stored in the signal information storage unit 15 was pre-stored by users such as the operation log analysis system 4, the analysis tool 3, and the monitored object 1. Embodiment 2 describes the case in which the operation log analysis system 4a estimates the signal information to be analyzed to be stored in the signal information storage unit 15.

[0052] Figure 18 shows an example of the configuration of the operation log analysis system 4a according to Embodiment 2. The operation log analysis system 4a is an operation log analysis system 4 of Embodiment 1 shown in Figure 1, with the addition of an analysis target signal information estimation unit 17. The analysis target signal information estimation unit 17 estimates the analysis target signal information using the operation log analysis results stored in the operation log analysis result storage unit 14.

[0053] Figure 19 shows an example of a method for estimating the signal information to be analyzed by the signal information estimation unit 17 of the operation log analysis system 4a according to Embodiment 2. Based on the operation log analysis results stored in the operation log analysis result storage unit 14, the signal information estimation unit 17 calculates, for example, the number of times and the probability of the signal to be analyzed displayed in the analysis tool 3 after signal A, which is the signal to be analyzed, and estimates that any signal to be analyzed that exceeds a specified value is related to signal A. For example, if the specified value is 0.3, the example in Figure 19(a) shows that signal A and signal B are related, signal A and signal C are related, but signal A and signal D are not related.

[0054] Furthermore, the analysis target signal information estimation unit 17 calculates, for example, the number of times and display time of the analysis target signal displayed on the analysis tool 3 simultaneously with signal A, based on the operation log analysis result storage unit 14, and estimates that analysis target signals exceeding a specified value are related to signal A. In the example in Figure 19(b), it is shown that signal A and signal B are related, and signal A and signal C are related. If the number of times and display time of signals A, B, and C are displayed simultaneously on the analysis tool 3 are exceeded by a specified value, the analysis target signal information estimation unit 17 may further determine that signal B and signal C are related.

[0055] Furthermore, if the names of the signals to be analyzed are not names like signals A and B as shown in Figure 7(b), but rather names like 7th floor_power_air conditioning as shown in Figure 8(a), the analysis target signal information estimation unit 17 may estimate the relationships between the analysis target signals from the keywords included in the signal names. For example, as shown in Figure 19(c), the analysis target signal information estimation unit 17 estimates that analysis target signals are related if their names contain a common keyword.

[0056] The analysis target signal information estimation unit 17 may further estimate the relationships between the analysis target signals and estimate the analysis target signal information by utilizing technologies such as AI (Artificial Intelligence) in each estimation method shown in Figures 19(a) to 19(c).

[0057] As described above, according to this embodiment, in the operation log analysis system 4a, the analysis target signal information estimation unit 17 estimates the analysis target signal information using the operation log analysis results. The operation log analysis system 4a can obtain the analysis target signal information even if the analysis target signal information has not been previously stored in the analysis target signal information storage unit 15 by a user such as the operation log analysis system 4a, analysis tool 3, or monitored target 1. As a result, the operation log analysis system 4a can start operation even when the analysis target signal information storage unit 15 does not store any analysis target signal information, or when only some of the analysis target signal information is stored in the analysis target signal information storage unit 15.

[0058] Embodiment 3. In Embodiment 1, the operation log analysis unit 13 analyzed the operation log using only the operation log stored in the operation log storage unit 12. Embodiment 3 describes a case in which the operation log analysis unit 13 further analyzes the operation log using the analysis target signal stored in the analysis target signal storage unit 2. Hereafter, the case in which Embodiment 3 is applied to Embodiment 1 will be described as an example, but it is also possible to apply Embodiment 3 to Embodiment 2.

[0059] Figure 20 shows an example of the configuration of the operation log analysis system 4b according to Embodiment 3. The operation log analysis system 4b has the same configuration as the operation log analysis system 4 of Embodiment 1 shown in Figure 1, but differs from Embodiment 1 in that the operation log analysis unit 13 uses the analysis target signal stored in the analysis target signal storage unit 2. The operation log analysis unit 13 analyzes the operation log using the signal value of the analysis target signal stored in the analysis target signal storage unit 2.

[0060] Figure 21 is the first figure showing an example of visualization by the operation log analysis result visualization unit 16 when the operation log analysis unit 13 of the operation log analysis system 4b according to Embodiment 3 analyzes the operation log using the signal value of the signal to be analyzed. The operation log analysis unit 13 aggregates the operation log not at predetermined time intervals, but based on the signal value of a certain signal to be analyzed, thereby obtaining operation log analysis results that show the differences in user operations in the analysis tool 3 due to differences in the signal value of the signal to be analyzed. Figure 21(a) shows that when signals A to E are used as the signals to be analyzed, if signal E is a signal to be analyzed that indicates temperature, the user of the analysis tool 3 will focus on different combinations of signals to be analyzed depending on whether the temperature is below 20 degrees or above 20 degrees. By performing operation log analysis using the signal value of signal E, the operation log analysis result visualization unit 16 can visualize the operation log analysis results as shown in Figure 21(a). The operation log analysis result visualization unit 16 can also visualize the same content as in Figure 21(a) using two figures, Figure 21(b) and Figure 21(c).

[0061] Figure 22 is a second figure showing an example of visualization by the operation log analysis result visualization unit 16 when the operation log analysis unit 13 of the operation log analysis system 4b according to Embodiment 3 analyzes the operation log using the signal values ​​of the signals to be analyzed. In Figure 22, in contrast to Figure 21, when the combination of signals of interest of the user in the analysis tool 3 differs significantly, the operation log analysis result visualization unit 16 can visualize the display period of each signal to be analyzed, the value of each signal to be analyzed, etc. By calculating the display period of each signal to be analyzed, the value of each signal to be analyzed, etc., the operation log analysis unit 13 analyzes the operation log, and the operation log analysis result visualization unit 16 can visualize the operation log analysis results as shown in Figure 22. A user of the operation log analysis system 4b who has checked the contents of Figure 22 can estimate the reason why the user's operation of the analysis tool 3 differs from the signal values ​​of the signals to be analyzed, etc.

[0062] As described above, according to this embodiment, in the operation log analysis system 4b, the operation log analysis unit 13 analyzes the operation log using the signal value of the signal to be analyzed. As a result, even if the user's operations in the analysis tool 3 differ depending on the signal value of a signal to be analyzed, the factors causing the different operations are visualized in the operation log analysis result visualization unit 16, allowing the user of the operation log analysis system 4b to understand the factors causing the differences in the user's operations in the analysis tool 3.

[0063] Embodiment 4. Embodiment 4 describes a case in which the operation log analysis system 4c groups similar operations in the analysis tool 3. Hereafter, the case in which Embodiment 4 is applied to Embodiment 1 will be described as an example, but it is also possible to apply Embodiment 4 to Embodiments 2 and 3.

[0064] Figure 23 shows an example of the configuration of the operation log analysis system 4c according to Embodiment 4. The operation log analysis system 4c is the same as the operation log analysis system 4 of Embodiment 1 shown in Figure 1, but with the operation log analysis unit 13 replaced by the operation log analysis unit 13c. The operation log analysis unit 13c includes a grouping unit 31. The grouping unit 31 groups similar user operations on different target signals using the analysis tool 3 according to the same type of operation, based on the operation logs stored in the operation log storage unit 12. The grouping unit 31 groups using, for example, the display period of the target signal in the analysis tool 3, the timing of the display of the target signal in the analysis tool 3 after the target signal is obtained, and the type of graph when the target signal is displayed graphically in the analysis tool 3. The grouping unit 31 may further group using the signal value of the target signal stored in the target signal storage unit 2. In grouping, the grouping unit 31 may group not only into one level but also into multiple levels of groups with a hierarchical structure.

[0065] Figure 24 shows an example of visualization by the operation log analysis result visualization unit 16 when the grouping unit 31 of the operation log analysis unit 13c of the operation log analysis system 4c according to Embodiment 4 groups similar operations performed by the user on the analysis tool 3 according to the same type of operation. Figure 24(a) shows a graph displaying each analysis target signal in chronological order, with each group created by the grouping unit 31, which groups similar operations performed by the user on the analysis tool 3 according to the same type of operation, added to it. In Figure 24(a), each group shows the analysis target signal that was the target of a similar operation performed by the user on the analysis tool 3. When a group is selected by the user of the operation log analysis system 4c, the operation log analysis result visualization unit 16 may perform visualization by superimposing the analysis target signal included in the selected group with the monitored object 1, as shown in Figure 24(b).

[0066] The grouping unit 31 aggregates the ratio of the analysis target signal and its display time, as displayed by the analysis tool 3, at defined intervals, for example, every n seconds. Note that n > 0. The grouping unit 31 aggregates, for example, that during a certain period, signal A was displayed for 50% of the time and signal B was displayed for 30% of the time. The grouping unit 31 uses a clustering method to group time periods with similar display time ratios for the analysis target signals. For example, as hierarchical clustering, the grouping unit 31 calculates the similarity between the display time ratio of the analysis target signal in a given time period and the display time ratio of the analysis target signal in an adjacent time period, and repeatedly merges groups when the similarity exceeds a defined threshold to form a group. However, the grouping method used by the grouping unit 31 is not limited to the above example. The grouping unit 31 may also use other clustering methods, such as the k-means method, to perform grouping.

[0067] Figure 25 shows an example of operation log analysis results obtained by the operation log analysis unit 13c of the operation log analysis system 4c according to Embodiment 4. In addition to the operation log analysis results described in Embodiment 1, the operation log analysis unit 13c may also obtain the relationship between the analysis target signals within a group, as shown in Figure 25, as an operation log analysis result.

[0068] As described above, according to this embodiment, in the operation log analysis system 4c, the grouping unit 31 of the operation log analysis unit 13c groups similar operations performed by the user on the analysis tool 3 for different target signals into groups of similar operations. This allows the operation log analysis system 4c to visualize to the user which operation phases are similar and have the same purpose. By grouping operation phases based on the target signals, the operation log analysis system 4c makes it easier to analyze the user's procedures on the analysis tool 3 regardless of the type of graph.

[0069] Furthermore, the operation log analysis system 4c can visualize, in an easy-to-understand manner for the user of the operation log analysis system 4c, where the user's operations on the analysis tool 3 changed significantly. The operation log analysis system 4c groups similar operation phases even if the combination of signals to be analyzed changes slightly. For example, by grouping slightly different phases such as upstream analysis phase and downstream analysis phase into the same group, the operation log analysis system 4c can visualize the overall flow of the analysis procedure in an easy-to-understand manner.

[0070] Embodiment 5. Embodiment 5 describes the case in which the operation log analysis system 4d sets a group name for a grouped group. Hereafter, the case in which Embodiment 5 is applied to Embodiment 4 will be described as an example.

[0071] Figure 26 shows an example of the configuration of the operation log analysis system 4d according to Embodiment 5. The operation log analysis system 4d is the same as the operation log analysis system 4c of Embodiment 4 shown in Figure 23, but with the operation log analysis unit 13c replaced by the operation log analysis unit 13d. The operation log analysis unit 13d is the same as the operation log analysis unit 13c of Embodiment 4 shown in Figure 23, but with the addition of a group name setting unit 32. The group name setting unit 32 sets a group name that indicates the characteristics of each group for each group that has been grouped by the grouping unit 31.

[0072] Figure 27 shows an example of visualization in the operation log analysis result visualization unit 16 when a group name setting unit 32, which is part of the operation log analysis unit 13d of the operation log analysis system 4d according to Embodiment 5, sets a group name. Figure 27 is Figure 24(a) with a group name added. The group name setting unit 32, for example, obtains information on the names of the analysis target signals included in the group from the analysis target signal information storage unit 15, and sets a group name from a common keyword included in the names of the analysis target signals. Specifically, if the names of the analysis target signals all contain the keyword "air conditioning" and each analysis target signal contains keywords such as "6th floor" and "7th floor", the group name setting unit 32 will set the group name to something like "comparison of air conditioning data by floor". If the display period is used, the group name setting unit 32 will set the group name to something like "analysis of air conditioning data (winter)". If the relationship between the analysis target signals is used, the group name setting unit 32 will set the group name to something like "analysis of upstream water level". The group name setting unit 32 sets the group name to "Analysis of air conditioning data with an outside temperature of 30°C or higher" when using the analysis target signals stored in the analysis target signal storage unit 2 that were used for grouping. In addition, the group name setting unit 32 may also use AI or the like in the group name setting method exemplified above.

[0073] Figure 28 shows an example of the operation log analysis result when the group name setting unit 32 of the operation log analysis unit 13d of the operation log analysis system 4d according to Embodiment 5 sets a group name. In Figure 28, the period display portion, the signal to be analyzed and the display time, the display method (operation content), and the operation value portion are information obtained from the analysis of the operation log analysis unit 13 of Embodiment 1. In Figure 28, the group ID is information obtained by grouping in the grouping unit 31, and the group name is the group name set in the group name setting unit 32. Figure 29 shows an example of the signal to be analyzed stored in the signal to be analyzed information storage unit 15 of the operation log analysis system 4d according to Embodiment 5. Figure 29(a) shows the name of the signal to be analyzed, and Figure 29(b) shows the relationship between the signal to be analyzed and the monitored object 1. The group name setting unit 32 can set a group name as shown in Figure 28 by using the signal to be analyzed information as shown in Figure 29. Although not shown in the illustration for Embodiment 4, the operation log analysis results obtained by the operation log analysis unit 13c in Embodiment 4 are the same as those in Figure 28, but with the group name removed.

[0074] As described above, according to this embodiment, in the operation log analysis system 4d, the group name setting unit 32 of the operation log analysis unit 13d sets a group name for the grouped groups in the grouping unit 31. This makes it easier for the user of the operation log analysis system 4d to understand the meaning of the grouped operation phases, i.e., the group. Even when the user of the operation log analysis system 4d is in charge of a different case than the one they normally handle, by checking the set group name, they can easily perform operation procedures similar to those for the case they normally handle, especially for operation phases that have the same group name as the case they normally handle.

[0075] For example, if the operation log of analysis tool 3 includes operation logs for different buildings, different projects, and different anomaly analyses, it is difficult to compare the operation logs if the names of the signals being analyzed are different. However, by grouping them and setting a group name for each group, the user's operation procedures in analysis tool 3 can be systematized and abstracted, making it easier to compare operation procedures even for different projects of the same type. For example, if the operation procedure in project A is "display signal values ​​a, b, c simultaneously" → "upstream analysis phase", and the operation procedure in project B is "display signal values ​​d, e, f simultaneously" → "upstream analysis phase", it is not possible to tell if the operation procedures are for the same purpose if the signal values ​​are used as they are. However, by setting a group name in the group name setting unit 32, it becomes possible to compare the operation procedures.

[0076] Embodiment 6. Embodiment 6 describes a case in which the operation log analysis system 4e analyzes operation logs for multiple analysis processes, such as analysis processes on the monitored target 1 by different users in the analysis tool 3, and multiple analysis processes on the monitored target 1 by the same user in the analysis tool 3. Embodiment 6 is applicable to Embodiments 1 to 5, but the following description will focus on cases where Embodiment 6 is applied to Embodiments 1, 4, 5, etc.

[0077] Figure 30 shows an example of the configuration of the operation log analysis system 4e according to Embodiment 6. The operation log analysis system 4e is an addition of a multiple operation group analysis unit 18 and a multiple operation group analysis result storage unit 19 to the operation log analysis system 4 of Embodiment 1 shown in Figure 1. The multiple operation group analysis unit 18 performs at least one of the following: analysis of differences in analysis processing by users based on operation log analysis results for the same or similar analysis processing by different users, and analysis of differences for each analysis processing based on multiple operation log analysis results for the same or similar analysis processing by the same user. The multiple operation group analysis result storage unit 19 is a storage unit that stores the multiple operation group analysis results, which are the analysis results of the multiple operation group analysis unit 18.

[0078] The multiple operation group analysis unit 18 analyzes operation log analysis results from multiple people or multiple operations among the operation log analysis results stored in the operation log analysis result storage unit 14. The multiple operation group analysis unit 18 may use operation log analysis results grouped by the operation log analysis unit 13c of Embodiment 4, or it may use operation log analysis results that have been grouped and given a group name by the operation log analysis unit 13d of Embodiment 5. The multiple operation group analysis unit 18 has a grouping function similar to the grouping unit 31 of Embodiment 4, and may perform grouping in the same way as the grouping unit 31.

[0079] The multiple operation group analysis unit 18, for example, when using the operation log analysis results obtained in Embodiment 4 or Embodiment 5, calculates which operation phases are similar to which operation phases in different people or different cases. In this case, the multiple operation group analysis unit 18 may treat operation phases in which the user of the analysis tool 3 viewed similar analysis target signals as the same type of operation phase, even if they are not exactly the same. The multiple operation group analysis unit 18 can, for example, use the ratio of analysis target signals and the display time of analysis target signals included in each person's operation group or operation phase as a vector and calculate the similarity using Euclidean distance, Mahalanobis distance, etc. The multiple operation group analysis unit 18 may also use other clustering methods. In the example of Embodiment 5, the multiple operation group analysis unit 18 may calculate the similarity of the group names set for the operation groups and assign the same label to similar operation groups. When using group names, the multiple operation group analysis unit 18 may also use AI or the like.

[0080] Figure 31 is the first figure showing an example of visualization by the operation log analysis result visualization unit 16 when the multiple operation group analysis unit 18 of the operation log analysis system 4e according to Embodiment 6 performs analysis. As shown in Figure 31, the operation log analysis result visualization unit 16 may display the analysis target signals displayed by the analysis tool 3 in chronological order for the analysis processes of multiple users that were the target of analysis by the multiple operation group analysis unit 18, or for multiple analysis processes by the same user. In the example of Figure 31, it can be seen that users A and B perform the analysis in the following procedure for factor A: display near anomaly → upstream analysis → downstream analysis → narrowed signal confirmation, and in the case of factor B: overall confirmation → downstream analysis → upstream analysis → narrowed signal confirmation. Also, in the example of Figure 31, it can be seen that user A performs the analysis in the following procedure: change period again after narrowed signal confirmation → overall confirmation → narrowed signal confirmation, regardless of the factor, but users B and C do not perform the analysis in the same procedure as user A.

[0081] Figure 32 is a second figure showing an example of visualization by the operation log analysis result visualization unit 16 when the multiple operation group analysis unit 18 of the operation log analysis system 4e according to Embodiment 6 performs analysis. As shown in Figure 32, the operation log analysis result visualization unit 16 may display the differences in the analysis target signals displayed by each user on the analysis tool 3, according to the signal value of the analysis target signal, signal E. At this time, the multiple operation group analysis unit 18 may calculate the similarity between user A and user B as follows: "Similarity between user A and user B = (Number of signals displayed by user A ∧ user B) / (Number of signals displayed by user A ∨ user B)", and the operation log analysis result visualization unit 16 may display the calculation result of the similarity between user A and user B by the multiple operation group analysis unit 18. The number of signals mentioned above may be the number of cells corresponding to each signal shown in Figure 32.

[0082] Figure 33 is a third figure showing an example of visualization by the operation log analysis result visualization unit 16 when the multiple operation group analysis unit 18 of the operation log analysis system 4e according to Embodiment 6 performs analysis. The operation log analysis result visualization unit 16 may display the similarity of each user's analysis process, as shown in Figure 33(a). In the example of Figure 33(a), the analysis processes of users B, C, and D are similar, but user A's analysis process is not as similar as that of users B, C, and D. The operation log analysis result visualization unit 16 may also display the differences in the analysis target signals displayed by the users using the analysis tool 3, as shown in Figure 33(b). In the example of Figure 33(b), the analysis target signals displayed by user A in the analysis tool 3 were also displayed together by other users as signals C, D, and E, but only user A frequently displayed signal F together with signals C, D, E, etc.

[0083] Figure 34 is the first figure showing an example of the multiple operation group analysis result, which is the analysis result of the multiple operation group analysis unit 18 of the operation log analysis system 4e according to Embodiment 6. Figure 34(a) is the grouping result for user A, and Figure 34(b) is the grouping result for user B. If the multiple operation group analysis unit 18 finds that the group to which id=1 was assigned as a result of user A's operation log analysis and the group to which id=3 was assigned as a result of user B's operation log analysis are similar groups, it assigns the same integrated id=1 to the similar groups. Here, the analysis target signals for user A are denoted as signals A to D, and the analysis target signals for user B are denoted as signals F to I. The multiple operation group analysis unit 18 can consider the signals to be in the same group even if each user was analyzing different signals. For example, if the difference between the display ratio of User A's signal A and User B's signal F is 5%, the difference between the display ratio of User A's signal B and User B's signal G is 10%, the difference between the display ratio of User A's signal C and User B's signal H is 5%, and the difference between the display ratio of User A's signal D and User B's signal I is 5%, and the difference is below a defined threshold, then the signals can be considered to be in the same group. The multiple operation group analysis unit 18 may also pre-store information that User A's signal A corresponds to User B's signal F, User A's signal B corresponds to User B's signal G, User A's signal C corresponds to User B's signal H, and User A's signal D corresponds to User B's signal I. Furthermore, although the above example described a case where the signal name of the signal to be analyzed handled by user A is different from the signal name of the signal to be analyzed handled by user B, the signal name of the signal to be analyzed handled by user A and the signal name of the signal to be analyzed handled by user B may be the same.

[0084] Figure 35 is a second figure showing an example of the multiple operation group analysis result, which is the analysis result of the multiple operation group analysis unit 18 of the operation log analysis system 4e according to Embodiment 6. Figure 35(a) shows the grouping result for user A, and Figure 35(b) shows the grouping result for user B. Figure 35(c) shows the processing flow for user A and user B. As shown in Figure 35(c), although the flow of the analysis process differs for user A and user B, it can be seen that the individual processes performed in the analysis process are similar. Figure 34 shows an example in which a unified ID is assigned by determining similar groups from the content of the included signals, and Figure 35 shows an example in which a unified ID is assigned from the group name. As in the example in Figure 35, even when the names of the signals to be analyzed are different and it is not possible to determine whether they are similar groups, the multiple operation group analysis unit 18 can determine similar groups from the group name and assign an unified ID. The multiple operation group analysis unit 18 calculates similarity from the group names assigned to each user's group, and assigns the same integrated ID to groups that are deemed similar. In this case, the multiple operation group analysis unit 18 may use AI or the like. As a result, the operation log analysis result visualization unit 16 can visualize the differences in procedures for each user, as shown in Figure 35(c), even if the names of the signals to be analyzed differ in different cases, because the multiple operation group analysis unit 18 assigns the integrated ID.

[0085] Figure 36 is a third figure showing an example of the analysis result of the multiple operation group analysis unit 18 of the operation log analysis system 4e according to Embodiment 6. If the degree of correlation of the analysis target signals has been determined for each user, the multiple operation group analysis unit 18 may determine the degree of correlation of the analysis target signals as a monitoring target 1, excluding individual differences among users, by calculating the average value from the degree of correlation of the analysis target signals for each user.

[0086] Figure 37 is a fourth figure showing an example of visualization by the operation log analysis result visualization unit 16 when the multiple operation group analysis unit 18 of the operation log analysis system 4e according to Embodiment 6 performs analysis. The operation log analysis result visualization unit 16 may use the multiple operation group analysis results as shown in Figure 36 to display the differences in the analysis target signals displayed by the user in the analysis tool 3, as shown in Figure 37. In the example of Figure 37, it is shown that while signals A, B, and C were displayed together by other users as analysis target signals displayed by user C in the analysis tool 3, signal D was frequently displayed together with signals A, B, and C only by user C.

[0087] As described above, according to this embodiment, in the operation log analysis system 4e, the multiple operation group analysis unit 18 performs at least one of the following: analysis of differences in analysis processing by users based on operation log analysis results for identical or similar analysis processing by different users, and analysis of differences for each analysis processing based on multiple operation log analysis results for identical or similar analysis processing by the same user. This makes it easy for users of the operation log analysis system 4e to compare operation log analysis results for multiple people and operation log analysis results for multiple cases.

[0088] Embodiment 7. Embodiment 7 describes a case in which the operation log analysis system 4f presents the operation details to the user operating the analysis tool 3. Embodiment 7 is applicable to Embodiments 1 to 6, but the following description will focus on the case in which Embodiment 7 is applied to Embodiment 1.

[0089] Figure 38 shows an example configuration of the operation log analysis system 4f according to Embodiment 7. The operation log analysis system 4f is an addition of a real-time analysis unit 20 and a recommendation unit 21 to the operation log analysis system 4 of Embodiment 1 shown in Figure 1. The real-time analysis unit 20 analyzes the operation log in real time and analyzes the user's operation status on the analysis tool 3. That is, the real-time analysis unit 20 detects the state of the user while they are operating the analysis tool 3 by analyzing the operation log in real time. The recommendation unit 21 presents the user who is operating the analysis tool 3 with the next operation to be performed, based on the analysis results of the real-time analysis unit 20 and the operation log analysis results stored in the operation log analysis result storage unit 14.

[0090] Based on the operation log, the real-time analysis unit 20 determines that if the user of the analysis tool 3 is displaying signals A and B as the signals to be analyzed, but no operations have been performed for a certain period of time, the user is in a state where they do not know which signal to analyze next. In this case, the real-time analysis unit 20 refers to the operation log analysis result storage unit 14 and extracts signals C and D as the signals to be analyzed that are most likely to be displayed in the analysis tool 3 after signals A and B. The real-time analysis unit 20 outputs the analysis results to the recommendation unit 21. As a result, the recommendation unit 21 can present to the user of the analysis tool 3 via the analysis tool 3, for example, "It appears that signals C and D are being analyzed after signals A and B."

[0091] Furthermore, the real-time analysis unit 20 can also utilize the correlation of the signals to be analyzed if the correlation of the signals to be analyzed has been determined by the operation log analysis unit 13c or operation log analysis unit 13d, as in Embodiment 4 or Embodiment 5. For example, as described above, let's assume that the real-time analysis unit 20 determines that the user of the analysis tool 3 does not know which signal to analyze next to look at. In this case, the real-time analysis unit 20 refers to the correlation of the signals to be analyzed contained in the operation log analysis result storage unit 14, extracts signal C whose correlation with signal A is above a threshold, and extracts signal D whose correlation with signal B is above a threshold. The real-time analysis unit 20 outputs the analysis results to the recommendation unit 21. As a result, the recommendation unit 21 can present to the user of the analysis tool 3 via the analysis tool 3, for example, "It seems that signals C and D are being analyzed after signals A and B."

[0092] Alternatively, the real-time analysis unit 20 refers to the correlation of the signals to be analyzed contained in the operation log analysis result storage unit 14, extracts the group containing signals A and B, and extracts signal E from the signals to be analyzed in that group whose correlation with signals A and B is above a threshold. The real-time analysis unit 20 outputs the analysis results to the recommendation unit 21. As a result, the recommendation unit 21 can present to the user of the analysis tool 3 via the analysis tool 3, for example, "It appears that signal E is being analyzed together with signals A and B."

[0093] Furthermore, the real-time analysis unit 20 can also utilize group information if it has been grouped by the operation log analysis unit 13c or operation log analysis unit 13d, as in Embodiment 4 or Embodiment 5. For example, as described above, suppose the real-time analysis unit 20 determines that the user of the analysis tool 3 does not know which signal to analyze next. In this case, the real-time analysis unit 20 refers to the group information contained in the operation log analysis result storage unit 14, estimates the current group, i.e., the operation phase, and extracts the next group, i.e., the next operation phase. The real-time analysis unit 20 outputs the information of the next group, or the information of the signal to be analyzed in the next group, to the recommendation unit 21. As a result, the recommendation unit 21 can present to the user of the analysis tool 3 via the analysis tool 3, "The next operation phase appears to be ○○," or "The signals to be analyzed in the next operation phase appear to be signals △ and □."

[0094] Furthermore, if the analysis has been performed by the multiple operation group analysis unit 18 as in Embodiment 6, the real-time analysis unit 20 may perform real-time analysis using the analysis results of the multiple operation group analysis unit 18.

[0095] As described above, according to this embodiment, in the operation log analysis system 4f, the real-time analysis unit 20 analyzes the operation log in real time and analyzes the user's operation status on the analysis tool 3, and the recommendation unit 21 presents the next operation to be performed to the user operating the analysis tool 3 based on the analysis results of the real-time analysis unit 20 and the operation log analysis results. As a result, the user of the analysis tool 3 can perform analysis processing efficiently by performing analysis processing based on the presented operation. It should be noted that the case in which the recommendation unit 21 presents the next operation to be performed to the user of the analysis tool 3 when the user's state of the analysis tool 3 is such that the next target signal to be analyzed is unknown has been described, but the system is not limited to this. The recommendation unit 21 can also present the next operation to be performed to the user of the analysis tool 3 at all times, regardless of the user's state of the analysis tool 3.

[0096] The configurations shown in the above embodiments are examples only, and it is possible to combine them with other known technologies, combine different embodiments, and omit or modify parts of the configuration without departing from the gist of the invention.

[0097] 1. Monitoring target, 2. Analysis target signal storage unit, 3. Analysis tool, 4, 4a, 4b, 4c, 4d, 4e, 4f. Operation log analysis system, 11. Operation log collection unit, 12. Operation log storage unit, 13, 13c, 13d. Operation log analysis unit, 14. Operation log analysis result storage unit, 15. Analysis target signal information storage unit, 16. Operation log analysis result visualization unit, 17. Analysis target signal information estimation unit, 18. Multiple operation group analysis unit, 19. Multiple operation group analysis result storage unit, 20. Real-time analysis unit, 21. Recommendation unit, 31. Grouping unit, 32. Group name setting unit, 90, 93. Processing circuit, 91. Processor, 92. Memory.

Claims

1. An operation log analysis system characterized by comprising: an operation log analysis unit that analyzes operation logs showing the user's operations on an analysis tool that analyzes an analysis target signal obtained from a monitored target; an operation log analysis result storage unit that stores the operation log analysis results which are the analysis results of the operation log analysis unit; an analysis target signal information storage unit that stores analysis target signal information showing the relationship between the monitored target and the analysis target signal; and an operation log analysis result visualization unit that visualizes the operation log analysis results, including information showing the correspondence with the monitored target, using the operation log analysis results and the analysis target signal information.

2. The operation log analysis system according to claim 1, characterized in that the operation log analysis unit classifies the operation log by at least one of the following methods: the signal to be analyzed displayed by the analysis tool, and the method of displaying the signal to be analyzed when it is displayed by the analysis tool.

3. The operation log analysis system according to claim 1 or 2, characterized in that the operation log analysis result visualization unit superimposes information indicating the user's operation status with respect to the analysis target signal on the screen showing the monitored target, as a method for visualizing the operation log analysis results.

4. An operation log analysis system according to any one of claims 1 to 3, further comprising: an analysis target signal information estimation unit that estimates the analysis target signal information using the operation log analysis results.

5. The operation log analysis system according to any one of claims 1 to 4, characterized in that the operation log analysis unit analyzes the operation log using the signal value of the signal to be analyzed.

6. The operation log analysis system according to any one of claims 1 to 5, characterized in that the operation log analysis unit comprises a grouping unit that groups similar operations performed by the user on different analysis target signals using the analysis tool, based on the operation log.

7. The operation log analysis system according to claim 6, characterized in that the operation log analysis unit comprises a group name setting unit that sets a group name indicating the characteristics of each group grouped by the grouping unit.

8. An operation log analysis system according to any one of claims 1 to 7, comprising: a multiple operation group analysis unit that performs at least one of the following: analysis of differences in user analysis processes based on the operation log analysis results for identical or similar analysis processes performed by different users, and analysis of differences for each analysis process based on the operation log analysis results for multiple identical or similar analysis processes performed by the same user; and a multiple operation group analysis result storage unit that stores the multiple operation group analysis results which are the analysis results of the multiple operation group analysis unit.

9. An operation log analysis system according to any one of claims 1 to 8, comprising: a real-time analysis unit that analyzes the operation log in real time and analyzes the user's operation status on the analysis tool; and a recommendation unit that, based on the analysis results of the real-time analysis unit and the operation log analysis results, presents the user, who is operating the analysis tool, with the next operation to be performed.

10. An operation log analysis program characterized by causing a computer to perform the following steps: an operation log analysis step in which an operation log analysis unit analyzes an operation log showing the user's operations on an analysis tool that analyzes an analysis target signal obtained from a monitored target; and an operation log analysis result visualization step in which an operation log analysis result visualization unit visualizes the operation log analysis result, which is the analysis result of the operation log analysis unit, and analysis target signal information showing the relationship between the monitored target and the analysis target signal, including information showing the correspondence with the monitored target.

11. An operation log analysis method characterized by comprising: an operation log analysis step in which an operation log analysis unit analyzes an operation log showing the user's operations in an analysis tool that analyzes an analysis target signal obtained from a monitored target; and an operation log analysis result visualization step in which an operation log analysis result visualization unit visualizes the operation log analysis result, which is the analysis result of the operation log analysis unit, and analysis target signal information showing the relationship between the monitored target and the analysis target signal, including information showing the correspondence with the monitored target.

Images