incident_logsrelated to that device are provided to you as a device source within the analysis view.
Timeframeto your analysis charts, you can also apply timeframes to your audit_log and incident_log as source-searches.
incident_logshead over to the
[SEARCHES]tab to build your own detailed search.
Timeframefor the period under analysis.