James,
Does your puppet report handler for Splunk work with current versions of puppet enterprise?
Thanks!
Actually that's not correct - the logs are data and one of a number of report processors sends them to Syslog. You can easily use other report processors to output them in a variety of forms. Here's two processors, one for Splunk:
https://github.com/jamtur01/puppet-splunk
And one for SplunkStorm:
https://github.com/jamtur01/puppet-splunkstorm
That do exactly that.
No, it is based on the logs that get written to syslog.
Chris