Use application=analytics_reporter in searches to find all analytics.
Analytic advisories are dynamically generated once a day. The analytic_supported field is true when data that supports the detector exists in your environment. There could be a supported analytic with no hits. For example, all "logon" events are supported, but only abnormal logon events become advisories.