It’s possible the VMYSENDR function in VM:Operator could help with this.
If SPLUNK works like other SYSLOGD collectors and we are simply pushing messages off to an IP address, then this should work.
Keep in mind though, not knowing what SPLUNK expects, this is a theory. But again, if it is similar in input expectations as SYSLOGD collectors then this VM:Operator function might help you push things off to SPLUNK as required.
Configuring VM:Operator in OBSERVER Mode as a SYSLOGD Sender is documented in the VM:Operator Administration guide available at techdocs.broadcom.com