All attack signatures vs server/application specific ASM attack signatures

Hi, as per everyone's experience, what's best to select attack signatures for a WAF policy? I'm aware that all attack signatures might have some downside (latency, resources issue) but isn't it goo...