I've tried the suggestions on this site already for 6.6.3.2, 6.6.4.x and 6.5.x.
Logging is working in our distributed splunk environment. We are just getting some records fields extracted to the wrong fields.
thanks