Use the Log Parser utility to make sure that results aren't different from version 2 to version 3. Use the OWASP version 3. The log parser utility is available here: https://github.com/SpiderLabs/ModSecurity-log-utilities