bufix: extract the value before deciding to skip it in sinsp_evt_formatter::tostring