chore(splunk hec sink)!: json encoding should get message first and then parse

chore(splunk hec sink)!: json encoding should get message first and then parse #8241