How to find how a device is using WLAN data

I’m trying to track down what users using a specific device are doing to use so much data. I used the InControl reports to track down the device but now i need to go deeper into what are they actually using the data on? how can i do this? I’m guessing the logs but i’m not sure how.