Splunk Log Publisher with iRule HSL

I don't think using a formatted publisher for an iRule will work. I say that because HSL::send is sending in whatever format you put in between the quotes for the part of the command. Formatted publishers are intended for system logs, HTTP request logging profiles, AVR, DNS logging profiles, etc... While I haven't seen that written, that is how I understand the functionality from my experience.