Move link references into correct capture block

content/en/docs/tasks/debug-application-cluster/audit.md

@@ -490,12 +490,6 @@ let users route data where they want. For example, users can emit audit events t
 plugin which supports full-text search and analytics.
 
 
-{{% /capture %}}
-
-{{% capture whatsnext %}}
-
-Visit [Auditing with Falco](/docs/tasks/debug-application-cluster/falco) 
-
 [kube-apiserver]: /docs/admin/kube-apiserver
 [auditing-proposal]: https://github.com/kubernetes/community/blob/master/contributors/design-proposals/api-machinery/auditing.md
 [auditing-api]: https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/staging/src/k8s.io/apiserver/pkg/apis/audit/v1/types.go
@@ -509,3 +503,9 @@ Visit [Auditing with Falco](/docs/tasks/debug-application-cluster/falco)
 [kube-aggregator]: /docs/concepts/api-extension/apiserver-aggregation
 
 {{% /capture %}}
+
+{{% capture whatsnext %}}
+
+Visit [Auditing with Falco](/docs/tasks/debug-application-cluster/falco) 
+
+{{% /capture %}}