Answers from Palo Alto support:
Regarding Splunk-Palo Alto networks App, kindly be advised that this is a developer supported application so it is not supported by through this channel TAC
In order to receive support for your Splunk app
https://splunk.paloaltonetworks.com/support.html
(reference https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CllZCAS)
Anyway for courtesy checking, the WildFire API key on our Splunk App will not be used unless there are WildFire logs coming from the Firewall or Panorama (it is just used for enriching the raw log with WildFIre analysis report from the cloud as per documentation).
... View more