I don't get have tried to just run a report and saw an issue ? Even if you added exception it should again be seen in a report just with different action: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/threat-prevention/create-threat-exceptions https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/monitoring/use-syslog-for-monitoring/syslog-field-descriptions/threat-log-fields.html You can use this as template just match on id: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm0OCAS https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/monitoring/view-and-manage-reports/generate-custom-reports
... View more