There was a thread in 2015 about this same topic and the solution was https://protect724.hp.com/docs/DOC-10722 or ESP Technology Alliance Ecosystem space on Protect724 for Palo Alto. These no longer have the documentation just six months later. Did ArcSight drop support for this connector? I did happen to find one posted on the PaloAlto website. Just curious about HP supporting it now.