I have configured the above settings as described, I see the below msg. Are there are any more settings that needs to be done to capture the events.
received event for unconfigured/disabled/deleted index='pan_log' with source='source::udp:514' host='host::xx.xx.xx.xx' sourcetype='sourcetype::pan_threat' (1 missing total)
Ya, thanks a lot for correcting me.
Your error is probably due to a typo in your inputs.conf file. The Palo alto apps index is pan_logs and not the singular pan_log. Please edit your inputs.conf.
Cheers,
Monzy