There may not be a lot of folks here who use Logstash with Splunk. I can't tell you much about the HTTP output. Splunk did recently announce improved support ingesting from Kafka (about time!), so perhaps you could go...
logstash -> kafka -> splunk
Of course many of us here would encourage you to just store the data in Elasticsearch instead of Splunk. 