We have integrated Pan sources with Splunk via syslog-ng. Until 01/11/24 the sourcetypes the parsing into sourcetypes pan:traffic, pan:threat, pan:system, pan:config was working fine. But, later all logs are found under pan_log.
- Version of add-on on Indexer used: 7.0.4