updates

Author: bwren

articles/log-analytics/log-analytics-cross-workspace-search.md

@@ -100,21 +100,21 @@ union Update, workspace("contosoretail-it").Update, workspace("b459b4u5-912x-46d
 ## Using cross-resource query for multiple resources
 When using cross-resource queries to correlate data from multiple Log Analytics and Application Insights resources, the query can become complex and difficult to maintain. You should leverage [functions in Log Analytics](query-language/functions.md) to separate the query logic from the scoping of the query resources, which simplifies the query structure. The following example demonstrates how you can monitor multiple Application Insights resources and visualize the count of failed requests by application name. 
 
-Create a query like the following that references the scope of Application Insights resources. The `withsource= SourceApp` command adds a column that designates the application name that sent the log.
+Create a query like the following that references the scope of Application Insights resources. The `withsource= SourceApp` command adds a column that designates the application name that sent the log. [Save the query as function](query-language/functions.md#create-a-function) with the alias _applicationsScoping_.
 
 ```Kusto
 // crossResource function that scopes my Application Insights resources
 union withsource= SourceApp
 app('Contoso-app1').requests, 
-app(''Contoso-app2').requests,
-app(''Contoso-app3').requests,
-app(''Contoso-app4').requests,
-app(''Contoso-app5').requests
+app('Contoso-app2').requests,
+app('Contoso-app3').requests,
+app('Contoso-app4').requests,
+app('Contoso-app5').requests
 ```
 
-[Save the query as function](query-language/functions.md#create-a-function) with the alias _applicationsScoping_.
 
-You can now [use this function](query-language/functions.md#use-a-function) in a cross-resource query like the following. The Function alias _applicationsScoping_ returns the union of requests table from all the defined applications. The query then filters for failed requests and visualizes the trends by application 
+
+You can now [use this function](query-language/functions.md#use-a-function) in a cross-resource query like the following. The function alias _applicationsScoping_ returns the union of the requests table from all the defined applications. The query then filters for failed requests and visualizes the trends by application. The _parse_ operator is optional in this example. It extracts the application name from _SourceApp_ property.
 
 ```Kusto
 applicationsScoping 
@@ -126,9 +126,6 @@ applicationsScoping
 | render timechart
 ```
 
-The _parse_ operator is optional in this example. It extracts the application name from _SourceApp_ property.
-
-
 
 ## Next steps
 

articles/log-analytics/query-language/functions.md

@@ -51,7 +51,7 @@ Create a function in the Azure portal by clicking **Save** and then providing th
 Use a function by including its alias in another query. It can be used like any other table.
 
 ## Example
-The following sample query returns all missing security updates reported in the last day:
+The following sample query returns all missing security updates reported in the last day. Save this query as a function with the alias _security_updates_last_day_. 
 
 ```Kusto
 Update
@@ -60,9 +60,7 @@ Update
 | where UpdateState == "Needed"
 ```
 
-Save this query as a function with the alias _security_updates_last_day_. 
-
-Create another to search for SQL-related needed security updates:
+Create another to search for SQL-related needed security updates.
 
 ```Kusto
 security_updates_last_day | where Title contains "SQL"