Merge pull request #266226 from halkazwini/nw-alert

Update screenshots

Author: AnnaMHuff

articles/network-watcher/media/network-watcher-alert-triggered-packet-capture/create-function-app-basics.png

@@ -5,9 +5,10 @@ author: halkazwini
 ms.author: halkazwini 
 ms.service: network-watcher
 ms.topic: how-to
-ms.date: 01/31/2024
+ms.date: 02/14/2024
 ms.custom: devx-track-azurepowershell
 ---
+
 # Monitor networks proactively with alerts and Azure Functions using Packet Capture
 
 Network Watcher packet capture creates capture sessions to track traffic in and out of virtual machines. The capture file can have a filter that is defined to track only the traffic that you want to monitor. This data is stored in a storage blob or locally on the guest machine.
@@ -22,13 +23,13 @@ By using Network Watcher alerting and functions from within the Azure ecosystem,
 
 ## Prerequisites
 
-* The latest version of [Azure PowerShell](/powershell/azure/install-azure-powershell).
-* An existing instance of Network Watcher. If you don't already have one, [create an instance of Network Watcher](network-watcher-create.md).
-* An existing virtual machine in the same region as Network Watcher with the [Windows extension](../virtual-machines/extensions/network-watcher-windows.md) or [Linux virtual machine extension](../virtual-machines/extensions/network-watcher-linux.md).
+- The latest version of [Azure PowerShell](/powershell/azure/install-azure-powershell).
+- An existing instance of Network Watcher. If you don't already have one, [create an instance of Network Watcher](network-watcher-create.md).
+- An existing virtual machine in the same region as Network Watcher with the [Windows extension](../virtual-machines/extensions/network-watcher-windows.md) or [Linux virtual machine extension](../virtual-machines/extensions/network-watcher-linux.md).
 
 ## Scenario
 
-In this example, your VM has more outgoing traffic than usual and you want to be alerted. Similarly, you can create alerts for any condition.
+In this example, a virtual machine (VM) has more outgoing traffic than usual and you want to be alerted. Similarly, you can create alerts for any condition.
 
 When an alert is triggered, the packet-level data helps to analyze why the outgoing traffic has increased. You can take steps to return the virtual machine to its original state.
 
@@ -53,29 +54,33 @@ This scenario does the following:
 
 To create an Azure function to process the alert and create a packet capture, follow these steps:
 
-1. In the [Azure portal](https://portal.azure.com), search for *function app* in **All services** and select it.
+1. Sign in to the [Azure portal](https://portal.azure.com).
+
+1. In the search box at the top of the portal, enter *function app*. Select **Function App** from the search results
 
-    :::image type="content" source="./media/network-watcher-alert-triggered-packet-capture/search-result.png" alt-text="Screenshot of finding the function app in Azure portal.":::
+    :::image type="content" source="./media/network-watcher-alert-triggered-packet-capture/function-app-portal-search.png" alt-text="Screenshot shows how to search for the function app in Azure portal." lightbox="./media/network-watcher-alert-triggered-packet-capture/function-app-portal-search.png":::
 
-2. Select **Create** to open the **Create Function App** screen.
+1. Select **+ Create**.
 
-   :::image type="content" source="./media/network-watcher-alert-triggered-packet-capture/create-function-app.png" alt-text="Screenshot of the Create function app screen.":::
+1. In the **Basics** tab of **Create Function App**, enter or select values for the following settings: 
 
-2. In the **Basics** tab, enter the following values: 
-   1. Under **Project Details**, select the **Subscription** for which you want to create the Function app and the **Resource Group** to contain the app.
-   2. Under **Instance details**, do the following:
-      1. Enter the name of the Function app. This name will be appended by *.azurewebsites.net*.
-      2. In **Publish**, select the mode of publishing, either *Code* or *Docker Container*.
-      3. Select a **Runtime stack**.
-      4. Select the version of the Runtime stack in **Version**.
-      5. Select the **Region** in which you want to create the function app.
-   3. Select **OK** to create the app.
-   3. Under **Operating System**, select the type of Operating system that you're currently using. Azure recommends the type of Operating system based on your runtime stack selection. 
-   4. Under **Plan**, select the type of plan that you want to use for the function app. Choose from the following options:
+   - Under **Project Details**, select the **Subscription** for which you want to create the Function app and the **Resource Group** to contain the app.
+   - Under **Instance details**, do the following:
+      - Enter the name of the Function app. This name will be appended by *.azurewebsites.net*.
+      - In **Publish**, select the mode of publishing, either *Code* or *Docker Container*.
+      - Select a **Runtime stack**.
+      - Select the version of the Runtime stack in **Version**.
+      - Select the **Region** in which you want to create the function app.
+   - Select **OK** to create the app.
+   - Under **Operating System**, select the type of Operating system that you're currently using. Azure recommends the type of Operating system based on your runtime stack selection. 
+   - Under **Plan**, select the type of plan that you want to use for the function app. Choose from the following options:
       - Consumption (Serverless) - For event-driven scaling for the most minimum cost. 
       - Functions Premium - For enterprise-level, serverless applications with event-based scaling and network isolation.
       - App Service Plan - For reusing compute from an existing app service plan.
-3. Select **Review + create** to create the app.
+
+   :::image type="content" source="./media/network-watcher-alert-triggered-packet-capture/create-function-app-basics.png" alt-text="Screenshot of the Create function app page in the Azure portal." lightbox="./media/network-watcher-alert-triggered-packet-capture/create-function-app-basics.png":::
+
+1. Select **Review + create** to create the app.
 
 ### Create an Azure function
 
@@ -85,9 +90,9 @@ To create an Azure function to process the alert and create a packet capture, fo
 
 2. Select **Develop in portal** from the **Development environment** drop-down.
 3. Under **Select a template**, select **HTTP Trigger**.
-4. In the **Template details** section, do the following:
-   1. Enter the name of the function in the **New function** field.
-   2. Select **Function** as the **Authorization level** and select **Create**.
+4. In the **Template details** section:
+   - Enter the name of the function in the **New function** field.
+   - Select **Function** as the **Authorization level** and select **Create**.
 5. After the function is created, go to the function and select **Code + Test**.
 
    :::image type="content" source="./media/network-watcher-alert-triggered-packet-capture/code-test.png" alt-text="Screenshot of the Code + Test screen.":::