Within incident management an important aspect is the analysis of log files describing traces of incident management processes and the errors made in them. Automated support of such an analysis can be helpful. In this paper some results are shown on automated support for analysis of errors in traces of incident management. For such traces it can be checked automatically which dynamic properties describing good functioning hold and which fail. The potential of the approach is shown in the formal analysis of a given empirical trace. The approach can also be applied in conjunction with simulation experiments.