Hi ESWBitto,
The 'unknown' and 'surf-config' are probably related with the accessed documents.
The 'unknown' value is a "dummy value" that is used when the action is not referred to any document: for example a login (failed or not).
In this way you can choose to include or exclude those kind of actions from your analytics. 😉
For the 'surf-config'… probably some kind of accesses to a wrong url?
About the 83 logins from the admin account: congratulations, you are one of the firsts that observe this behavior. 🙂
Those are the accesses during the extraction process (AAAR_Extract) because you (correctly) use the admin account.
My suggestion is to define a "analytic" user in alfresco (with administrator privileges) and use this in the AAAR extractions.
Using this user you could choose to ignore the accesses, developing a filter in the reports queries.
Good job ESWBitto: your questions indicates you are really using AAAR in the right way, focusing the work on the data quality.
I have some ideas about the check of the "data quality"… but I don't know when they will be ready. 🙂