I need to be able to list the changes made to firewall rules.It seems like a simple audit task that you should be able to do but unfortunately, I can't find the answer to my problem from these documentations. Does anyone know how to do this audit from splunk? Palo Alto Networks App for Splunk | SplunkbasePalo Alto Networks Add-on for Splunk | Splunkbase
There should be a sequence_number field in the config logs that can be correlated with the other logs of the same number to list the changes made to firewall rules
