Have the same issue, not only for "Interfaces" but also for panels: "Configuration started by host", "Device Logins by user".
Additionally, If it helps, I have installed an App "Syslog Priority Field Decoder / Lookup" for adding Severity level fields to Splunk and have configured "no_priority_stripping = true".
... View more