user log file analysis