When modifying a security policy rule, the change summary and preview changes show log-start and log-end.

When modifying a security policy rule in Panorama, the change summary and preview changes show 'log-start' and 'log-end'.

• Go to the Security Policy.
• Open any rule and click "OK" without making any changes, or add any object to the rule.
• Go to Commit and Preview Changes. The "log-start" and "log-end" values are displayed.

log-start no;
log-end yes;

• Palo Alto Firewalls or Panorama
• PAN-OS 10.1.9-h1, 10.1.14, 11.1.3, 10.2.11, and 11.0.7 and above.
• Security Policy

This is the new behavior in the current PAN-OS versions.

1. This is the current working behavior.
2. The behavior can be changed by logging in as root.
3. If workaround is needed, Open a Support ticket. 

Note: The functionality has not changed, the preview changes now display the implicit "log start and log end" values explicitly.