log excersise rearranged

Author: hagen-p

content/en/s4r/3-quick-tour/4-log-observer-home/1-log-observer-home.md

@@ -38,14 +38,13 @@ Let's run a little search exercise:
 
 * Click on one of the log entries in the Logs table to validate that the entry contains `cardType: "visa"`.
 * Let's find all the orders that have been shipped. Click on **Clear All** in the filter bar to remove the previous filter.
-* In the **Fields** Pane type `severity` in the search box.
-  ![severity](../images/find-severity.png?width=15vw&classes=left)
-* You may need to scroll down the page if you still have the onboarding content displayed at the top to see the **Exclude all logs with this fields** button in the next step.
-* Make sure you click the {{% button style="grey" %}}**Exclude all logs with this fields**{{% /button %}} as the order log line does not have a severity assigned.
-* Click on the {{% button style="grey" %}}**Add Filter**{{% /button %}} button in the filter bar.
-* This time, just type `order:` in the **Enter Keyword...** box and press enter.
+* Click again on {{% button style="gray" %}}Add Filter{{% /button %}} in the filter bar, then select **Keyword**. Next just type `order:` in the **Enter Keyword...** box and press enter.
+* You should now only have logs lines that contain the word "order:". There are still a lot of logs lines, so lets filter some more.
+* Add another filter, this time select the **Fields** box, then type `severity` in the **Find a field...** search box and select it.
+  ![severity](../images/find-severity.png?width=15vw&classes=left) 
+* Make sure you click the {{% button style="gray" %}}**Exclude all logs with this fields**{{% /button %}}  at the bottom of the dialog box, as the order log line does not have a severity assigned.  This will remove the others.
+* You may need to scroll down the page if you still have the onboarding content displayed at the top in order to see the **Exclude all logs with this fields** button.
 * You should now have a list of orders sold for the last 15 minutes.
-
 {{% /notice %}}
 
 Next, let's check out **Splunk Synthetics**.

content/en/s4r/6-apm/2-apm-service-dashboard.md

@@ -9,9 +9,10 @@ APM Service Dashboards provide request, error, and duration (**RED**) metrics ba
 
 {{% notice title="Exercise" style="green" icon="running" %}}
 
-* In the **Request rate** text chart, click the **...** and select **Copy**. Note that you now have a **1** before the **+**  at the top right of the page, indicating you have a copied chart to the clipboard.
-* Click the **...** in the **Error rate** text chart and select **Add to clipboard**. Note that you now have **2** before the **+** on the top right of the page.
-* We will be using these charts later on in the workshop. Click the back button in your browser to return to the Service Map.
+* We want to use some of these chart in a later exercise, so lets grab them now while we are looking at them:  
+  * In the **Request rate** text chart **(1)**, click the **...** and select **Copy**. Note that you now have a **1** before the **+**  at the top right of the page, indicating you have a copied chart to the clipboard. (3)
+  * Click  again on the **...** in the **Request rate** line chart **(2)** and select **Add to clipboard**.
+* Note that you now have **2** before the **+** on the top right of the page. **(3)**
 
 {{% /notice %}}
 

content/en/s4r/6-apm/images/apm-service-dashboard.png

@@ -10,7 +10,14 @@ In this section, we are going to use the **Copy and Paste** functionality to ext
 
 * Find your Service Health Dashboard.
 * Select the **2+** at the top of the page and select **Paste charts**, this will create the charts in your custom dashboard.
-* Add `sf_environment:[WORKSHOPNAME]` and `sf_service:payment_service` to the override filter box. ( This will make sure the charts only show data for your workshop **paymentservice**).
+<!--* Add `sf_environment:[WORKSHOPNAME]` and `sf_service:payment_service` to the override filter box. ( This will make sure the charts only show data for your workshop **paymentservice**).
+-->
+* The chart currently show data for all *Environments* & *Services*, so lets add a filter to our environment and the paymentservice.
+* Click on the the 3 dots **...** at the  top right side of the **Request Rate** chart. This wil open the edit mode.
+* In the new screen, click on the {{% button style="blue" %}}sf_environment{{% /button %}} button (1) in the middle of the screen, and pick the [WORKSHOPNAME] from the drop down. The button should change to **sf_environment:[WORKSHOPNAME]**
+* Do the same with the {{% button style="blue" %}}sf_service.{{% /button %}} button (2), only this time change it to `paymentservice`.
+![edit chart](../images/edit-chart.png)
+* Click the {{% button style="blue" %}}Save and close {{% /button %}} button (3). 
 * Click {{% button style="blue" %}}Save{{% /button %}}.
 * As the new pasted charts appeared at the bottom of our dashboard, we need to re-organize our dashboard gain.
 * First drag the *Log view* chart to the second row, between the *Instructions* chart and the *Log Lines* chart, and expand it to fill the row.