Dashboard red dots that say "Click to view config changes near this time"

Recently I noticed these red dots on the 11.4.1 dashboard that say "Click to view config changes near this time" when you hover over them. When you click a dot it gives you all sorts of useful info about the object that was modified/created/deleted, but it doesn't say who made the changes. I've searched the logs using the following commands but don't get anything useful:

zcat /var/logs/audit.*.gz | grep 
zcat /var/logs/ltm.*.gz | grep 

All I get is an entry that says "user=root" saved the config and other entries that state the newly created objects were marked down. If only there was a place to look that links the username with the objects. Those red dots in the dashboard are awesome, but they miss that one critical piece of information (username). I'm sure if it were easy to do, or even possible, F5 would have done it. I guess I'm just venting. Anybody know any tricks?