diff --git a/windows/keep-secure/event-error-codes-windows-defender-advanced-threat-protection.md b/windows/keep-secure/event-error-codes-windows-defender-advanced-threat-protection.md
index 712e3b7b37..3dd165c68a 100644
--- a/windows/keep-secure/event-error-codes-windows-defender-advanced-threat-protection.md
+++ b/windows/keep-secure/event-error-codes-windows-defender-advanced-threat-protection.md
@@ -311,13 +311,13 @@ See [Configure Windows Defender ATP endpoints](configure-endpoints-windows-defen
46 |
Failed to register and start the event trace session [%1] due to lack of resources. Error code: %2. This is most likely because there are too many active event trace sessions. The service will retry in 1 minute. |
An error occurred on service startup while creating ETW session due to lack of resources. The service started and is running, but will not report any sensor event until the ETW session is started. |
-No action required. The service will try to start the session every minute. |
+Normal operating notification; no action required. The service will try to start the session every minute. |
47 |
Successfully registered and started the event trace session - recovered after previous failed attempts. |
This event follows the previous event after successfully starting of the ETW session. |
-No action required. |
+Normal operating notification; no action required. |
48 |