diff --git a/Solutions/Windows Firewall/Data Connectors/template_WindowsFirewallAma.JSON b/Solutions/Windows Firewall/Data Connectors/template_WindowsFirewallAma.JSON index 8bf20a54929..b524b9bd562 100644 --- a/Solutions/Windows Firewall/Data Connectors/template_WindowsFirewallAma.JSON +++ b/Solutions/Windows Firewall/Data Connectors/template_WindowsFirewallAma.JSON @@ -2,7 +2,7 @@ "id": "WindowsFirewallAma", "title": "Windows Firewall Events via AMA (Preview)", "publisher": "Microsoft", - "descriptionMarkdown": "Windows Firewall is a Microsoft Windows application that filters information coming to your system from the internet and blocking potentially harmful programs. The firewall software blocks most programs from communicating through the firewall. Customers wishing to stream their Windows Firewall application logs collected from their machines can now use the AMA to stream those logs to the Microsoft Sentinel workspace. For more information, see the [Microsoft Sentinel documentation](https://go.microsoft.com/fwlink/p/?linkid=2228623&wt.mc_id=sentinel_dataconnectordocs_content_cnl_csasci).", + "descriptionMarkdown": "Windows Firewall is a Microsoft Windows application that filters information coming to your system from the internet and blocking potentially harmful programs. The firewall software blocks most programs from communicating through the firewall. Customers wishing to stream their Windows Firewall application logs collected from their machines can now use the AMA to stream those logs to the Microsoft Sentinel workspace.\nNOTE: DCEs are required to be configured to be linked with the DCR created for the AMA to collect logs. For this connector, a DCE will automatically be created in the same region as the Workspace is. If you already use a DCE stored in the same region, it is possible to change the default created DCE and use your existing one through the API. DCEs can be located in your resources with SentinelDCE prefix in the resource name.\nFor more information, see the [Microsoft Sentinel documentation](https://go.microsoft.com/fwlink/p/?linkid=2228623&wt.mc_id=sentinel_dataconnectordocs_content_cnl_csasci).", "graphQueries": [ { "metricName": "Total data received",