How do you investigate network anomaly related alerts?

Hello everyone.   Using some of the built-in analytical rules such as "Anomaly was observed with IPv6-ICMP Traffic", when you go into the incident event details, its just some numbers of the expect...