This is a Splunk Technology Add-on (TA) that collects data from Palo Alto Networks devices via API and ingests it into Splunk. It enables ingestion of logs and telemetry from Palo Alto Networks devices via API (instead of just syslog/HEC). It is designed to complement existing log-based data collection by providing a flexible, API-driven method — ideal for environments where direct syslog forwarding is not feasible, where firewalls are behind NAT or restricted networks, or where additional metadata must be collected beyond traditional log streams. Users can create their own custom API endpoint scripts that require additional-parsing or custom logic with this add-on.