@lewis in the threat log if you're seeing "wildfire-virus" as a type, I don't think you're gonna see a submission report. That log type just means, as I understand it, that somewhere in the "WildFire network" the communications stream/file was seen and was determined to be malicious. So that signature was added at somepoint to the threat subscription you have.
So it wasn't necessarily a WildFire submission in your environment which created the original signiture and as such you wouldn't see a report.
https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/framemaker/70/pan-os/pan-os.pdf
P. 29
"WildFire—Provides near real-time malware and antivirus signatures created as a result of the analysis done by the WildFire cloud service. Without the subscription, you must wait 24 to 48 hours for the signatures to roll into the Applications and Threat update"
--EDIT--
Under the "Threat Logs" this describes the log
P.321
"wildfire—A WildFire verdict generated when the firewall submits a file to WildFire per a WildFire Analysis profile and a verdict (malicious, grayware, or benign, depending on what you are logging) is logged in the WildFire Submissions log.
wildfire-virus—Virus detected via an Antivirus profile."
So yeah one will have the report, one won't.
... View more
