What exactly are you having troubles with? You can use the API-Browser available at https://<firewall-ip>/api to actually go through and figure out the xpath for what you want to modify; that along with the documentation that @emyl79 linked to should get you pointed in the right direction.
@BPry thank you for the pointers. Why is it that when you issue a command for config audit on running config and candidate config the versions are identical?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!