The Blue Coat device should allow you to specify multiple targets for the syslog host (endpoint). I believe this can be done via CLI or the UI.
In a worst case scenario, you could have a splunk instance perform data cloning or index and forward although I would not recommend you do this without consulting with a knowledgable Splunker.
