Documentation

SecurityInsight error codes

Each code SecurityInsight names in a mail, a run log or a ticket, with what it means and what to do. Quote the code when you contact support.

• si-cmdb-0701 No endpoints to send to the CMDB: the tenant has no active devices
• si-col-0501 A collection ran out of memory
• si-data-1401 The asset pages show an older copy than the rest of the web app
• si-data-1402 The report figures are from an earlier collection
• si-data-1403 The database is almost full
• si-data-1404 The database is full
• si-flow-1201 The pipeline runner is not scheduled
• si-flow-1202 A scheduled collection waited for or skipped a pipeline run
• si-flow-1203 A pipeline run or step has run much longer than usual
• si-flow-1204 A pipeline step runs far past its usual time and shows no progress
• si-mail-1101 The mail send right is not limited to the shared mailbox
• si-mail-1102 SecurityInsight may not send as its shared mailbox yet
• si-mail-1103 The mail send right is not verified as limited to the shared mailbox
• si-perm-1001 SecurityInsight's identity is missing a Microsoft Graph permission
• si-perm-1002 SecurityInsight's identity is missing a Microsoft Defender permission
• si-perm-1003 SecurityInsight's identity may not read Azure
• si-perm-1004 SecurityInsight may not read the security scores
• si-ra-0101 Defender Vulnerability Management is not in this tenant
• si-ra-0102 An optional asset field is not in this install (for example no CMDB)
• si-ra-0103 A report query used a reserved word and could not run
• si-ra-0201 A report returned more rows than the source's count
• si-ra-0302 A report's data is more than Log Analytics can answer at once
• si-ra-0303 Risk Analysis ran out of memory on a report
• si-ra-0900 A report failed for a cause SecurityInsight does not recognise yet
• si-ra-0901 A report has no data source in this tenant
• si-ra-0902 A column a report reads is not in this install
• si-ra-0903 A report's query has an error
• si-ra-0904 A report timed out or Microsoft's service failed
• si-ra-0905 A report's answer was too large
• si-ra-0906 A report returned more rows than the source counted
• si-ra-0907 A report returned fewer rows than the source holds
• si-ra-0908 A report could not reach the settings database
• si-ra-0909 SecurityInsight's identity may not read what a report needs
• si-ra-0910 A report needs a licence this tenant does not have
• si-ra-0911 A report kept its last complete result: a source it reads returned no rows
• si-ra-0912 A report kept its last complete result: the Entra role read was not complete
• si-ra-0913 A report has kept its last complete result for 3 Detailed runs in a row: a source it reads still returns no rows
• si-ra-0914 A report has kept its last complete result for 3 Detailed runs in a row: the Entra role read is still not complete
• si-set-0401 The settings database cannot be reached
• si-snow-1301 A ServiceNow output's check failed
• si-upd-0801 The updater may not store secrets in Key Vault (secure hand-over)
• si-upd-0802 The updater may not change the SecurityInsight database
• si-upd-0803 Azure refused the new version for a SecurityInsight job, so the update was rolled back
• si-upd-0804 A SecurityInsight job could not be put back on its previous version after a failed update
• si-upd-0805 A SecurityInsight job did not confirm the new version, so the update was rolled back
• si-upd-0806 An update has waited more than 24 hours for a pipeline run to end
• si-upl-0601 The run record could not be built

SecurityInsight settings · SecurityInsight scripts