Identifying clusters of user behavior in intranet search engine log files