diff --git a/articles/sentinel/normalization-about-parsers.md b/articles/sentinel/normalization-about-parsers.md index cf323f9ad296..a10fdef135b2 100644 --- a/articles/sentinel/normalization-about-parsers.md +++ b/articles/sentinel/normalization-about-parsers.md @@ -48,12 +48,12 @@ The following table lists the available unifying parsers: | Schema | Unifying parser | | ------ | ------------------------- | | Audit Event | _Im_AuditEvent | -| Authentication | imAuthentication | +| Authentication | _Im_Authentication | | Dns | _Im_Dns | -| File Event | imFileEvent | +| File Event | _Im_FileEvent | | Network Session | _Im_NetworkSession | -| Process Event | - imProcessCreate
- imProcessTerminate | -| Registry Event | imRegistry | +| Process Event | _Im_ProcessCreate
_Im_ProcessTerminate | +| Registry Event | _Im_Registry | | Web Session | _Im_WebSession |