Threat exception using CLI for DNS Security, results show ID 0, unknown-signature and unknown-fqdn in UI

• Go to  GUI: Objects > Security Profiles > Anti-Spyware > (select the configured spyware profile) > DNS Signatures > Exceptions.
• Enter a valid DNS signature under the Search field
• CLI incorrectly displays ID of 0, with Name as Unknown-Signature and FQDN as Unknown-fqdn (displayed below)

• PAN-OS 9.0 or 9.1
• Palo Alto Firewall.
• Anti Spyware DNS signature exceptions.

1. The most simple and direct solution is just to search again, sometimes multiple searches and requests eventually lead to the signature being found.
2. If the above doesn't work, enter the threat name and if that doesn't work, you can enter the Threat ID through the CLI after entering configure mode:

> configure
# set profiles spyware "Name of Anti-Spyware Profile" botnet-domains threat-exception <IDnumber_of_the_unique_threat_ID>
# commit
# exit