fixing heading level

Author: batamig

articles/sentinel/false-positives.md

@@ -140,14 +140,14 @@ You can also do subnet filtering by using a watchlist. For example, in the prece
 let subnets = _GetWatchlist('subnetallowlist');
 ```
 
-### Example: Manage exceptions for the Microsoft Sentinel solution for SAP® applications
+## Example: Manage exceptions for the Microsoft Sentinel solution for SAP® applications
 
 The [Microsoft Sentinel solution for SAP® applications](sap/solution-overview.md) provides functions you can use to exclude users or systems from triggering alerts.
 
 - **Exclude users**.  Use the [**SAPUsersGetVIP**](sap/sap-solution-log-reference.md#sapusersgetvip) function to:
 
    - Call tags for users you want to exclude from triggering alerts. Tag users in the *SAP_User_Config* watchlist, using asterisks (*) as wildcards to tag all users with a specified naming syntax.
-   - List specific SAP roles and/or profiles you want to exclude from triggering alerts.     
+   - List specific SAP roles and/or profiles you want to exclude from triggering alerts.
 
 - **Exclude systems**. Use functions that support the *SelectedSystemRoles* parameter to determine that only specific types of systems trigger alerts, including only *Production* systems, only *UAT* systems, or both.