Palo Alto REST API Polling

I currently have two Palo Alto Firewalls in my environment and they are set to poll using the REST API. Changed the password for the API user and the firewall is now generating failed login attempt logs. I have deleted the endpoint in Solarwinds and re-added, I can test the API login and it is successful. However, the logs are still being generated. Does Orion store the past login information (i.e. key) somewhere and it is being utilized over the credentials that are added on the node details?