What do you mean by "serverless"? Are you thinking of appliances on which software cannot be installed? If so, they usually have a means for sending logs to an external location, usually via syslog. Stand up a syslog server and have the appliance send events to it. The syslog server should forward the events to Splunk.
---
If this reply helps you, Karma would be appreciated.
