Can a Rule Accidentally Taught from WAF Logs be Retrieved?

Option > 1

First, follow "Monitor Mode > Related vService > Logs > WAF Logs". On the opened screen, requests blocked by the WAF are displayed. If a log has been mistakenly taught, deactivate the "Only not Learned" button at the top to view both learned and non-learned logs. Logs with a minus icon under the "Learning suggestion" column indicate previously learned entries.

Click on the relevant log to open its details. Then, to revert the learning process, click the "Edit Corresponding Rule" button and undo the applied changes.

Option > 2

Another method is to navigate to the "WAF Management" section. Open the rules for the related Host Group, locate the relevant rule, and either manually edit or delete it to revert the changes.

This way, the incorrect learning action is undone, and the log will reappear as teachable in the "WAF Logs" section.