catalog-api incident endpoint. start at /logs