user event logic now better segregated in the sinsp_usrevtparser class