You've got two options.. You can modify the syslog.conf file like you would any FreeBSD box.  The biggest different is restarting the syslogd process on all nodes of the cluster either manually or by doinga :  isi_for_array -sq 'killall -HUP syslogd'  The other, and easier, option might be hte "isi_log_server" command which will do the same thing as editing the syslong.conf file...  The syntax is:  isi_log_server add [filter]  The filter syntax is the same as syslog.. The default is "*.warn;*.notice;kern.*;ifs.info;istat.none""  Just make sure the remote server is setup to allow remote logging.
We are configuring Isilon to send syslog information to splunk servers. Could any one suggest how can I perform this or any document refering to this.  Thanks
Syslog configuration for Isilon