Customer ID (Known as Tenant ID also) for Cortex Data Lake users disappear from panorama managed firewalls after cloud services plugin 1.4.0 is installed to panorama.
Those managed devices stop forwarding logs to Cortex Data Lake with cloud services plugin 1.4.0.on panorama.

It is able to confirm Customer ID with the command below
 

panorama

Note: Even though the issue occurs, Customer ID is seen in panorama,
> show system state | match cfg.saas.custid
cfg.saas.custid: XXXXXXXXX
 

Firewall

Firewall shows Customer ID as "0"
> show system state | match cfg.saas.custid
cfg.saas.custid: 0

We are aware of the issue as PAN-122804, and it was fixed in PAN-OS 8.1.12 and 9.0.4.
 

PAN-OS 9.0.4 Addressed Issues

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-release-notes/pan-os-9-0-addressed-issues/pan-os-9-0-4-addressed-issues.html

PAN-OS 8.1.12 Addressed Issues

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-release-notes/pan-os-8-1-addressed-issues/pan-os-8-1-12-addressed-issues.html
 

• Using Cortex Data Lake with panorama, and firewalls under management of panorama configured to forward logs to Cortex Data Lake.
• cloud-service plugin 1.4.0 or later is installed to .
• Panorama PAN-OS version is before 8.1.12 / 9.0.4.

Resolution 1: Upgrade PAN-OS of panorama to 8.1.12 / 9.0.4 or later.

1. Navigate to Panorama->Device Deployment->Licenses
2. Click Refresh link
3. Select FWs and click Refresh button

Resolution 2: Open support case. 

OPENING A CASE WITH CUSTOMER SUPPORT