Hmm. That is unfortunate in my case. I just have one firewall and no Panorama. In the past it seems like 9.x code never had these issues.
I'm going to switch to syslog filtering (not ideal) and see where I get there.
After re-engaging Palo support they have confirmed that this is a bug in PanOS starting in 10.2.x. 10.1.3 and below seem to not be affected. The fix is to upgrade to 10.2.3-h2 which is available, wait for 10.2.4 due to release next year, or downgrade 10.1.3.
© Copyright 2023 Hewlett Packard Enterprise Development LPAll Rights Reserved.