For viewing events included in incidents, the following modes are provided in the events table:
Simple viewing mode. In this mode, the events table displays all events without consideration of how events are nested in incidents.
Tree display mode. In this mode, incidents are displayed as tree structures that can be collapsed or expanded using the and buttons next to the headers of incidents.
You can change the display mode when configuring the events table.