We were seeing the same problem with NetScaler NS9.2: Build 48.6.cl - however we discovered that sending the syslog events to Splunk via the internal interface on the Netscaler resulted in garbled events, however sending via the external interface resulted in sweet, sweet syslog love...
All the best,
Luke 🙂
... View more