Merge pull request #88953 from marcelodiiorio/patch-69

Update cloudknox-howto-create-custom-queries.md

Author: ktoliver

articles/active-directory/cloud-infrastructure-entitlement-management/cloudknox-howto-create-custom-queries.md

@@ -28,7 +28,7 @@ This article describes how you can use the **Audit** dashboard in CloudKnox Perm
 
 ## Create a custom query
 
-1. In the **Audit** dashboard, in the **New Query** subtab, select **Authorization system type**, and then select the authorization systems you want to search: Amazon Web Services (**AWS**), Microsoft **Azure**, or Google Cloud Platform (**GCP**).
+1. In the **Audit** dashboard, in the **New Query** subtab, select **Authorization System Type**, and then select the authorization systems you want to search: Amazon Web Services (**AWS**), Microsoft **Azure**, Google Cloud Platform (**GCP**), or Platform (**Platform**).
 1. Select the authorization systems you want to search from the **List** and **Folders** box, and then select **Apply**.
 
 1. In the **New Query** box, enter your query parameters, and then select **Add**.
@@ -40,22 +40,22 @@ This article describes how you can use the **Audit** dashboard in CloudKnox Perm
     Repeat this step for the second and third box to complete entering the parameters.
 1. To change your query as you're creating it, select **Edit** (the pencil icon), and then change the query parameters.
 1. To change the parameter options, select the down arrow in each box to display a dropdown of available selections. Then select the option you want.
-1. To discard your selections, select **Reset query** for the parameter you want to change, and then make your selections again.
+1. To discard your selections, select **Reset Query** for the parameter you want to change, and then make your selections again.
 1. When you’re ready to run your query, select **Search**.
 1. To save the query, select **Save**.
 
-    CloudKnox saves the query and adds it to the **Saved queries** list.
+    CloudKnox saves the query and adds it to the **Saved Queries** list.
 
 ## Save the query under a new name
 
-1. In the **Audit** dashboard, select the ellipses menu **(…)** on the far right and select **Save as**.
+1. In the **Audit** dashboard, select the ellipses menu **(…)** on the far right and select **Save As**.
 2. Enter a new name for the query, and then select **Save**.
 
-    CloudKnox saves the query under the new name. Both the new query and the original query display in the **Saved queries** list.
+    CloudKnox saves the query under the new name. Both the new query and the original query display in the **Saved Queries** list.
 
 ## View a saved query
 
-1. In the **Audit** dashboard, select the down arrow next to **Saved queries**.
+1. In the **Audit** dashboard, select the down arrow next to **Saved Queries**.
 
     A list of saved queries appears.
 2. Select the query you want to open.
@@ -65,19 +65,19 @@ This article describes how you can use the **Audit** dashboard in CloudKnox Perm
 
     CloudKnox displays details of the query in the **Activity** table. Select a query to see its details:
 
-    - The **Identity details**.
+    - The **Identity Details**.
     - The **Domain** name.
-    - The **Resource name** and **Resource type**.
-    - The **Task name**.
+    - The **Resource Name** and **Resource Type**.
+    - The **Task Name**.
     - The **Date**.
-    - The **IP address**.
-    - The **Authorization system**.
+    - The **IP Address**.
+    - The **Authorization System**.
 
 ## View a raw events summary
 
-1. In the **Audit** dashboard, select **View** (the eye icon) to open the **Raw events summary** box.
+1. In the **Audit** dashboard, select **View** (the eye icon) to open the **Raw Events Summary** box.
 
-    The **Raw events summary** box displays **Identity details**, the **Task name**, and the script for your query.
+    The **Raw Events Summary** box displays **Username or Role Session Name**, the **Task name**, and the script for your query.
 1. Select **Copy** to copy the script.
 1. Select **X** to close the **Raw events summary** box.
 
@@ -93,22 +93,22 @@ This article describes how you can use the **Audit** dashboard in CloudKnox Perm
 1. In the **Audit** dashboard, load the query you want to delete.
 2. Select **Delete**.
 
-    CloudKnox deletes the query. Deleted queries don't display in the **Saved queries** list.
+    CloudKnox deletes the query. Deleted queries don't display in the **Saved Queries** list.
 
 ## Rename a query
 
 1. In the **Audit** dashboard, load the query you want to rename.
 2. Select the ellipses menu **(…)** on the far right, and select **Rename**. 
 3. Enter a new name for the query, and then select **Save**.
 
-    CloudKnox saves the query under the new name. Both the new query and the original query display in the **Saved queries** list.
+    CloudKnox saves the query under the new name. Both the new query and the original query display in the **Saved Queries** list.
 
 ## Duplicate a query
 
 1. In the **Audit** dashboard, load the query you want to duplicate.
 2. Select the ellipses menu **(…)** on the far right, and then select **Duplicate**.
 
-    CloudKnox creates a copy of the query. Both the copy of the query and the original query display in the **Saved queries** list.
+    CloudKnox creates a copy of the query. Both the copy of the query and the original query display in the **Saved Queries** list.
 
     You can rename the original or copy of the query, change it, and save it without changing the other query.
 
@@ -118,4 +118,4 @@ This article describes how you can use the **Audit** dashboard in CloudKnox Perm
 
 - For information on how to view how users access information, see [Use queries to see how users access information](cloudknox-ui-audit-trail.md).
 - For information on how to filter and view user activity, see [Filter and query user activity](cloudknox-product-audit-trail.md).
-- For information on how to generate an on-demand report from a query, see [Generate an on-demand report from a query](cloudknox-howto-audit-trail-results.md).
+- For information on how to generate an on-demand report from a query, see [Generate an on-demand report from a query](cloudknox-howto-audit-trail-results.md).