Duplicate syslogs being delivered

We have syslog arriving at the F5 via two separate virtual servers using port TCP514 from a single device which is configured to use two syslog servers - The virtual servers then forward the logs to ...