si-ra-0302 A report's data is more than Log Analytics can answer at once
What it means
One report needs more data from Log Analytics than one answer can carry. SecurityInsight reads it again in smaller parts; only when even the smallest parts cannot be answered is the report left out of this run. Its findings are then unknown for this run, not resolved, and SecurityInsight's team looks at it.
| Code | si-ra-0302 |
|---|---|
| Who acts | Invardia support |
| Action | Invardia support helps: open a ticket and quote the code, or follow the steps below. |
What to do
- Invardia support: Read the run log for the report: it names the query or lookup and the part count it reached. The query itself has to be made lighter (fewer columns, an earlier filter) -- more parts cannot help.
Written by the SecurityInsight team; Invardia publishes it. Quote the code when you contact support@invardia.com. · All SecurityInsight error codes