Merge pull request #294270 from austinmccollum/patch-1

clarify AMA DNS extension and prereqs

Author: prmerger-automator[bot]

articles/sentinel/connect-dns-ama.md

@@ -19,16 +19,17 @@ DNS is a widely used protocol, which maps between host names and computer readab
 While some mechanisms were introduced to improve the overall security of this protocol, DNS servers are still a highly targeted service. Organizations can monitor DNS logs to better understand network activity, and to identify suspicious behavior or attacks targeting resources within the network. The **Windows DNS Events via AMA** connector provides this type of visibility. For example, use the connector to identify clients that try to resolve malicious domain names, view and monitor request loads on DNS servers, or view dynamic DNS registration failures.
 
 > [!NOTE]
-> The Windows DNS Events via AMA connector currently supports analytic event activities only.
+> The Windows DNS Events via AMA connector only supports analytical log events.
 
 ## Prerequisites
 
 Before you begin, verify that you have:
 
 - A Log Analytics workspace enabled for Microsoft Sentinel.
-- The Windows Server DNS solution installed on your workspace.
-- Windows Server 2012 R2 with auditing hotfix and later.
-- A Windows DNS Server.
+- The **Windows DNS Events via AMA** data connector installed as part of the **Windows Server DNS** solution from content hub.
+- Windows server 2016 and later supported, or Windows Server 2012 R2 with the auditing hotfix.
+- DNS server role installed with **DNS-Server** analytical event logs enabled.
+  DNS analytical event logs aren't enabled by default. For more information, see [Enable analytical event logging](/windows-server/networking/dns/dns-logging-and-diagnostics#enable-analytical-event-logging).
 
 To collect events from any system that isn't an Azure virtual machine, ensure that [Azure Arc](/azure/azure-monitor/agents/azure-monitor-agent-manage) is installed. Install and enable Azure Arc before you enable the Azure Monitor Agent-based connector. This requirement includes: