In OS X, monitor:~/Library/Logs/CrashReporter/MobileDevice/
In Windows 7 (and Vista): C:\Users<USERNAME>\AppData\Roaming\Applecomputer\Logs\CrashReporter/MobileDevice/
The logs are transferred each time the device is sync'd on the computer.
Just point Splunk to the directory
Thanks for quick response...but if I want get the crash logs from ios device to splunk storm using REST API?