We have a product for cloud and on-prem WAF called Attack Analytics that analyzes WAF events from your environment and presents you with data that could help you identify an emerging threat or anomalous behavior. Contact your account team and ask them for a demo on Attack Analytics