Here is the solution to the issue:
Under the Palo Alto App -> Traffic Dashboard -> Edit -> Edit Source (XML)
You'll see a block of XML code towards the top defining the inputs. The issue is that there are no prefix and suffix identifiers for the first several fields (src_ip, dst_ip, dst_port, and src_user). So, we need to defined those lines of code in order for the search bars to work properly. You'll end up with a chunk of code that looks like this (replacing the [ and ] brackets with appropriate XML < and > brackets):
[input type="text" token="src_ip"]
[label]Source IP[/label]
[default][/default]
[prefix]src_ip="[/prefix]
[suffix]"[/suffix]
[/input]
[input type="text" token="dst_ip"]
[label]Destination IP[/label]
[default][/default]
[prefix]dst_ip="[/prefix]
[suffix]"[/suffix]
[/input]
[input type="text" token="dst_port"]
[label]Destination Port[/label]
[default][/default]
[prefix]dst_port="[/prefix]
[suffix]"[/suffix]
[/input]
[input type="text" token="src_user"]
[label]Source User[/label]
[default][/default]
[prefix]src_user="[/prefix]
[suffix]"[/suffix]
[/input]
Hope this helps!
... View more