Hi Mark,
It may be a side point, but there is a very document about how to configure SM19/SM20.
Analysis and Recommended Settings of the Security Audit Log (SM19 / SM20)
Have a look if not already.
Maybe after the configuration is done you wont have these false entries.
Regards,
Adel