usually the first few line have issue, i suspect the application still writing the log file but splunk already try to read it.
====================================================================================
\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00
====================================================================================
Any method to fix it or let splunk wait the application finish writing first