diff --git a/Azure-ARM/forensics_log_pull.ps1 b/Azure-ARM/forensics_log_pull.ps1
index 69aef93..0e514e4 100644
--- a/Azure-ARM/forensics_log_pull.ps1
+++ b/Azure-ARM/forensics_log_pull.ps1
@@ -23,7 +23,7 @@ $LogQuery = "SELECT TOP (1000) [Id]
       ,[Level]
       ,[TimeStamp]
       ,[Exception]
-	  ,[LogEvent]
+      ,[LogEvent]
       ,[AssemblyName]
       ,[AssemblyVersion]
       ,[SourceContext]