Attack signature - learning suggestion not showing actual request

Learning suggestions might have been overwritten. You can go to Security --> Event Logs --> Application requests and use advance filter. In that select violation as "attack signature detected" and in search string select "signature id" from dropdown and put the copy the signature id you are looking for. That should give the detailed request.