How do I edit a custom signature after it's been activated?
Symptom
How do I edit a custom signature after it's been activated?
Resolution
A custom signature consists of one or more custom signature definitions. When a definition has been activated, it can no longer be edited. It can only be deactivated/archived. To further modify the code within a custom signature, a new custom signature definition needs to be created. This can be done by viewing the custom signature then clicking "New".
The new custom signature definition will be editable. Once the necessary changes are made, click "Activate" to activate the new definition. Once the new version is activated, the old version will automatically become archived.
More info here: https://www.paloaltonetworks.com/documentation/evident/evident-web-reference/control-panel/custom-signatures