Egress filter before logging to Splunk people, hell if you can practice filtering better from the application itself.

No need to say send all you debug logs to security, or all your info logs to a logging instance for site reliability.