VMware not possible to forward only auth logs to splunk

VMWARE

We can either forward all logs to splunk. Or no logs.


references:

Configuring syslog on ESXi (broadcom.com)

UPDATED