In general, the disclosure describes techniques for identifying sequences of user actions from event data and logs of user actions for at least one user of a computing system. In one example, a system includes a sequence mining unit that processes event data and logs of user actions for at least one user of a computing system to obtain a set of one or more candidate action sequences each comprising a sequence of one or more user actions. A sequence filtering unit of the system applies, to the set of one or more candidate action sequences, one or more filters informed by a model of user actions for an application domain to obtain a set of one or more filtered action sequences to improve a quality of action sequences identified by the system. An output device of the system outputs an indication of the set of one or more filtered action sequences usable for generating at least one automated workflow or information usable for improving a workflow.