Splunk responsible for more than 40% of firewall traffic.

Hello All, I'm working in a huge installation and Splunk is consuming more than 40% of firewall traffic. I don't have details of the Splunk Topology yet, but we have firewall between Splunk Servers and Forwarders. What is the recommendation to minimize the firewall traffic? I'll appreciate any suggestion. Thanks in advance, MarcoR