From ba06a8cee2e96c85c8bcda4c18d3fb1501ee7fd8 Mon Sep 17 00:00:00 2001
From: ddeyo <david.deyo@docker.com>
Date: Wed, 12 Sep 2018 14:41:49 -0700
Subject: [PATCH] maria's feedback incorporated

---
 ee/ucp/admin/configure/create-audit-logs.md | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/ee/ucp/admin/configure/create-audit-logs.md b/ee/ucp/admin/configure/create-audit-logs.md
index f67351bd9a..e19b19d6a3 100644
--- a/ee/ucp/admin/configure/create-audit-logs.md
+++ b/ee/ucp/admin/configure/create-audit-logs.md
@@ -47,12 +47,14 @@ You can use audit logs to help with the following use cases:
     curl --cert ${DOCKER_CERT_PATH}/cert.pem --key ${DOCKER_CERT_PATH}/key.pem --cacert ${DOCKER_CERT_PATH}/ca.pem -k -X GET https://ucp-domain/api/ucp/config/logging > auditlog.json
     ```
 
-3. Modify the auditLevel field to metadata or request.
+3. Open auditlog.json to modify the 'auditlevel' field to `metadata` or `request`.
 
     ```
-    vi auditlog.json
-
-    {"logLevel":"INFO","auditLevel":"metadata","supportDumpIncludeAuditLogs":false}
+    {
+    	"logLevel": "INFO",
+    	"auditLevel": "metadata",
+    	"supportDumpIncludeAuditLogs": false
+    }
     ```
 
 4. Send the JSON request for the auditlog config with the same API path but with the `PUT` method.