We're thinking of leveraging the approach listed here ( https://apisero.com/recipe-to-implement-splunk-enterprise-on-premise-for-mulesoft-application-using-... ) to ingest the Mulesoft logs since the Splunk HEC sounds like an ideal option.
Does anyone else have other suggestions?