Platform as a service (PAAS) featuring software platforms for computer security surveillance that evaluate the health and performance of operational or security related workflow processes and events using practical and accurate algorithms to filter out incidents, occurrences, and events that are less relevant, less actionable and unnecessary to evaluating security system health by security information and event management (SIEM) software systems or other event logging software systems, and that identify the difference between normal and abnormal user behavior specific to a particular organization