Map<Integer, String> paths = getPathsWithNametype(eventData, "CREATE");
if(paths.size() == 0){
isCreate = false;
paths = getPathsWithNametype(eventData, "NORMAL");
if(paths.size() == 0){ //missing audit record
<BUG>logger.log(Level.INFO, "Missing required path record in 'open'. event id '"+eventData.get("eventid")+"'");
return;</BUG>
}
}else{ //found path with CREATE nametype. will always be one
isCreate = true;

Map<Integer, String> paths = getPathsWithNametype(eventData, "CREATE");
if(paths.size() == 0){
isCreate = false;
paths = getPathsWithNametype(eventData, "NORMAL");
if(paths.size() == 0){ //missing audit record
log(Level.INFO, "Missing PATH record", null, eventData.get("eventid"), syscall);
return;
}
}else{ //found path with CREATE nametype. will always be one
isCreate = true;
