Is there a way for me to identify the difference between isc:bind:query logs and infoblox:dns?

[#1]

I am trying to route the logs into Cribl to be forwarder on to Splunk. I was hoping there was a flag in the log that I can use to differentiate from the two different logs. I assume there has to be, right ?

[#2]

Just for a little more clear: is there a flag in the syslog from Infoblox that will allow me to sort the events into two different sourcetypes: isc:bind:query logs and infoblox:dns