Hello!
I am having the same problem. I tried to set the RTLS server IP and port to a Splunk server, but the controller needs a shared key for RTLS and I cannot set a key on splunk.
The best I could achieve is that I set the user logging level to one higher (notification), then I could send the syslog to Splunk and see the association of clients to AP-s. Its not accurate, and it cannot record probe requests.
I asked TAC, but they said that at this moment it is not possible to get raw measurements/probe-requests from controller without ALE.
If you come up with a workaround I would appreciate it.
Daniel