automatic learning logs/report ?

Hello,

I am looking for the same type of solution => view newly automatically learned signatures on parameters for example.

We're using Splunk so we decided to fetch this using Baboon Rest API app.

The idea was to get signaturesOverrides on parameters, and look if new parameters were added (like thread owner, we also think suggestions disappear when reaching max score, but they should be added elsewhere).

Now, we're stuck with an issue from iControl that returns error when we try to filter on arrays (following happen because signatureOverrides is not an object but an array, but error occurs when filtering on arrays, see at the end)

So, the only option left we have now is to fetch every parameter and to script the filter, then to import it in Splunk (not optimal)

What am I looking for: another way to get the automatic learning logs OR advices for handling iControl queries.

BTW: I do agree with owner that audit logs are well hidden

Thanks !

=================== below example of error with queries

filtering on objects 

https://[ip]/mgmt/tm/asm/policies/[policy_id]/parameters?$select=name,signatureOverrides&$filter=signatureOverrides ne null

returns err 400 -> "Unexpected format for 'signatureOverrides'. Expected Object. Got scalar or array."


and when trying to filter on arrays: 

https://[ip]/mgmt/tm/asm/policies/[policy_id]/parameters$select=name,signatureOverrides&$filter=signatureOverrides/any()

returns err 400 -> "Can not parse $filter: 'signatureOverrides/any()'"