Incorrect user-id format – Palo Alto
If you notice in Monitor > Logs > Traffic or Monitor > Logs > User-ID the User field showing a client as “domain.com\username” instead of firstname.lastname@example.org, please login via CLI and run the following command:
All users will need to disconnect/reconnect for the tables to start populating correctly again.
I had to figure this one out on my own as Palo tech support could not figure it out. :-\