| 400 | ForbiddenOperation | Please stop log import task. | - | diagnosis |
| 403 | Forbidden.UserDenied.RdAccount | Forbidden User. | The current user is a resource directory user, please contact the administrator to add as a delegated administrator for threat analysis. | diagnosis |
| 400 | AccessKey.NotFound | Access Key not found, please add access key for siem. | - | diagnosis |
| 400 | IllegalParameter | The specified parameter %s is not valid, only support %s. | Parameters | diagnosis |
| 403 | OrderExpired | Siem Order Not Found. | No valid threat analysis order. | diagnosis |
| 400 | InvalidOperation | Accesskey %s already bound. | AccessKey has been bound. | diagnosis |
| 400 | AssumeRoleError | Specified role "AliyunServiceRoleForSasCloudSiem" is not exists. | AliyunServiceRoleForSasCloudSiem associated role is missing. | diagnosis |
| 400 | SLS.Index.Lost | The SLS project initialization will take a few minutes, try again later. | Log Service takes several minutes to create an index. Please try again later. | diagnosis |
| 400 | SIEM.Region.Duplicate | The region can be set only once. | Region can only be set once. | diagnosis |
| 400 | Siem.Analysis.IllegalParameter | Start time should less than or equal to end time. | - | diagnosis |
| 400 | Siem.Analysis.SQLError | Analysis SQL is error. | - | diagnosis |
| 400 | SLS.Project.Lost | The SLS project initialization will take a few minutes, try again later. | Log Service initialization takes several minutes. Please try again later. | diagnosis |