I am using the Splunk Python SDK to pull data and then populating a dictionary that fits the GELF structure, that gets sent off to Graylog via JSON over HTTP. Work in progress code on Github below.