VMware Not Possible to Forward Only Auth Logs to Splunk

We can either forward all logs to splunk. Or no logs.


references:

Configuring syslog on ESXi (broadcom.com)

UPDATED