Logs no longer visible in EFK after configuring secure forwarder

Issue

• The cluster is configured as fluentd will send openshift logs to an external splunk instance based on this page
• The logs are visible in splunk but no longer the logs are seen in the kibana portal or searchable in EFK.
• The cluster should have logs available in both splunk and EFK, how could this be achieved?