Thanks for the informtion,
We already had setup splunk remote servers in F5. I'm looking how to configure in F5 to just send the audit logs to splunk.
The above link is to send only audit logs to a remote log server
make sure for the connectivity between F5 and the log server