Added Palo Alto user account to GPO to add to Event Viewers. Event viewers needs to be enabled for UIA to read logs from AD.