Check this out...
The Universal Forwarder for ARM is a dedicated Splunk package for Linux and ARM based systems where data needs to be collected directly from devices such as the Raspberry Pi.
http://apps.splunk.com/app/1611/
Raspberry Pi is a trademark of the Raspberry Pi Foundation.
... View more