Extraction condition determination method, communication monitoring system, extraction condition determination apparatus and extraction condition determination program

摘要

The extraction condition determination method according to the embodiment is an extraction condition determination method executed by the extraction condition determination device (10), and includes: a log that is communication log information in a predetermined period and in which a specific type of communication is known A collection step of collecting information and a storage section (13) that stores an extraction condition in which conditions for extracting a specific type of communication are defined from the log information, and matches the condition from the collected log information A decision step of deciding to adopt the extraction condition when the ratio of the specific type of communication to the extracted communication is equal to or more than a threshold value, a control step of outputting the adopted extraction condition And an output control step of executing the output control step.