From 3a8330e2b78c96d187a096694fbedc81b0bd36de Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 31 Jan 2017 22:20:14 -0800 Subject: [PATCH] fix folder navigation --- ...e-arcsight-windows-defender-advanced-threat-protection.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/windows/keep-secure/configure-arcsight-windows-defender-advanced-threat-protection.md b/windows/keep-secure/configure-arcsight-windows-defender-advanced-threat-protection.md index 79f1fc6389..4ea677baf4 100644 --- a/windows/keep-secure/configure-arcsight-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/configure-arcsight-windows-defender-advanced-threat-protection.md @@ -137,10 +137,9 @@ If the `redirect_uri` is a https URL, you'll be redirected to a URL on the local 8. Login to the HP ArcSight console. -9. Navigate to **Active channel set** > **New Condition** > **Device** -> **Device Product**. +9. Navigate to **Active channel set** > **New Condition** > **Device** > **Device Product**. -10. Set **Device Product = Windows Defender ATP**. When you've verified that events are flowing, stop the process again and go to Windows Services and start the ArcSight FlexConnector REST. +10. Set **Device Product = Windows Defender ATP**. When you've verified that events are flowing to the tool, stop the process again and go to Windows Services and start the ArcSight FlexConnector REST. You can now run queries in the HP ArcSight console.