add screenshots

Author: jmcarlock

solutions/images/security-host-anomalies.png

@@ -85,7 +85,19 @@ Machine learning jobs look back and analyze two weeks of historical data prior t
 
 View details of detected anomalies in the **Anomalies** data tables, available on the **Hosts**, **Network**, or **Users** pages. You can access these pages from the navigation menu or with the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md).
 
-You can narrow the time range to a specific anomaly using the `Max anomaly score by job` field in the overview section of the host or IP details. You can also drag and drop anomaly details, like the `Entity` or any associated `Influencers`, into **Timeline**.
+    :::{image} /solutions/images/security-host-anomalies.png
+    :alt: Host anomalies
+    :screenshot:
+    :::
+
+You can narrow the time range to a specific anomaly using the `Max anomaly score by job` field when you click into a specific host, IP, or user name (depending on the page).
+
+    :::{image} /solutions/images/security-host-max-anomaly-score-by-job.png
+    :alt: Host anomalies
+    :screenshot:
+    :::
+
+You can also drag and drop anomaly details, like the `Entity` or any associated `Influencers`, into **Timeline**.
 
 To view the `Anomalies` table widget and `Max Anomaly Score By Job` details, the user must have the `machine_learning_admin` or `machine_learning_user` role.