What would be the best way to audit suppression of vulnerabilities and policies?

[ric-sec]

Hey,

I have the use case that developers are allowed to do the analysis of vulnerabilities and policies but we as an infosec department, want to know when a vulnerability or policy is being suppressed.

I found the table 'VIOLATIONANALYSISCOMMENT' and this one contains all the information I need but I'm wondering if there is also an equivalent to have this as a log output?
Ideally it would be possible to distinguish these audit logs from the rest so our logstash can pick it up and manage it differently from the other logs.

Is something like this possible?

Thanks!