Syslog Distribution

Hello:

I have a situation where we receive raw syslog from remote devices across the WAN, but have multiple syslog destinations that need to receive the syslog messages (ArcSight, Splunk, etc).

I want to know if it is possible to configure the Big-IP 10200 to have a virtual server IP to receive the syslog messages from remote devices across the WAN and then duplicate them to a pool of syslog servers that are on the LAN. The purpose of this would be to de-duplicate syslog traffic across the WAN.

Thanks!