vip for audit logs to splunk

Hello everyone i have created a new virtual server for splunk to send the logs from avaya servers to loadbalance between splunk poolmembers.

 

virtual server - splunk.xxx.com port 10110 client profile and protocol are udp in virtual server settings. monitor : udp

 

problem statement : i see logs in splunk as default send string

 

what would be the problem and why dont i see the actual logs sent by avaya servers... ??