To find all occurrences of PIN code use, use the Reports menu:
In the portal, go to Reports > Endpoint Reports > Events.
Make sure you're on tab ALL EVENTS, then click the filter icon on column Event.
Expand the box width if necessary and scroll until you find PIN code entries.
PIN Code entries have event names such as:
Admin Session PIN 2 issued
Admin Session PIN code used
Application block PIN 2 issued
Select the required event - only matching events will now appear in the list.
Once the list is filtered, the browser window shrinks to show only the matching events. To view the full list of events again, click the filter icon once more and choose (All) at the very top of the filter list.