The 'Network Security' dashboard includes the Top Correlation Events. Is there an easy way within the Palo Alto Networks App to view the corresponding "evidence", similar to what Panorama shows?
Your welcome to create a custom panel. We have a macro set up to get all correlated logs.
`pan_correlation`
I know this is an old thread but any chance you could post the logic of your macro?