Viprion F5 sending logs to Qradar need the slot number removed

I think what you want is this:

tmsh modify sys syslog clustered-host-slot disabled

And possibly:

tmsh modify sys syslog clustered-message-slot enabled

Some example usage and output, for easy reference:

[root@Viprion:/S1-green-P:Active:Standalone] config  tmsh list sys syslog all-properties|grep cluster
    clustered-host-slot enabled
    clustered-message-slot disabled

[root@Viprion:/S1-green-P:Active:Standalone] config  tail -2 /var/log/ltm
Jan 11 14:53:04 slot1/Viprion info audit_forwarder: audit_forwarder started.
Jan 11 14:53:03 slot3/Viprion info audit_forwarder: audit_forwarder started.

[root@Viprion:/S1-green-P:Active:Standalone] config  tmsh modify sys syslog clustered-host-slot disabled
[root@Viprion:/S1-green-P:Active:Standalone] config  tail -2 /var/log/ltm
Jan 11 14:53:59 Viprion info audit_forwarder: audit_forwarder started.
Jan 11 14:54:01 Viprion info audit_forwarder: audit_forwarder started.

[root@Viprion:/S1-green-P:Active:Standalone] config  tmsh modify sys syslog clustered-message-slot enabled
[root@Viprion:/S1-green-P:Active:Standalone] config  tail -2 /var/log/ltm
Jan 11 14:54:21 Viprion info slot1 audit_forwarder: audit_forwarder started.
Jan 11 14:54:23 Viprion info slot3 audit_forwarder: audit_forwarder started.

[root@Viprion:/S1-green-P:Active:Standalone] config  tmsh modify sys syslog clustered-host-slot enabled
[root@Viprion:/S1-green-P:Active:Standalone] config  tail -2 /var/log/ltm
Jan 11 14:54:37 slot1/Viprion info slot1 audit_forwarder: audit_forwarder started.
Jan 11 14:54:39 slot3/Viprion info slot3 audit_forwarder: audit_forwarder started.

[root@Viprion:/S1-green-P:Active:Standalone] config  tmsh modify sys syslog clustered-message-slot disabled

I know these have existed since at least v12.