04-28-2020 08:18 AM
If you're running 9.0 code, you can use the Policy Optimizer to help you identify what applications are currently being seen on the existing rule. It will easily allow you to apply just these apps to the rule, or clone a new rule with the selected applications.
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-new-features/app-id-features/policy-optimizer.ht...
Custom reports would also be very helpful to you. You can build and save report queries with all kinds of different options to pull info from the logs, and organize it into convenient summaries.
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/monitoring/view-and-manage-reports/custom-...
