Why is Splunk sending logs splitted?

[harunglec]

I am trying to send logs from Splunk Enterprise Instance to external server(Syslog, ELK vb.) But Splunk is sending logs splitted. For example computer name in one log and eventcode in another. What is cause of this problem?

[woodcock]

You have not told us anything about EXACTLY HOW you are forwarding the logs. Without this we cannot possibly help.

[harunglec]

I wrote both TCP and Syslog servers(IP:port) and also I added sendCookedData = false. But both of them(Syslog and TCP) are getting logs line by line. Is there any way to get logs as JSON or XML format? Or If you have any idea, You can tell me.