[[["わかりやすい","easyToUnderstand","thumb-up"],["問題の解決に役立った","solvedMyProblem","thumb-up"],["その他","otherUp","thumb-up"]],[["わかりにくい","hardToUnderstand","thumb-down"],["情報またはサンプルコードが不正確","incorrectInformationOrSampleCode","thumb-down"],["必要な情報 / サンプルがない","missingTheInformationSamplesINeed","thumb-down"],["翻訳に関する問題","translationIssue","thumb-down"],["その他","otherDown","thumb-down"]],["最終更新日 2025-09-04 UTC。"],[[["\u003cp\u003eGoogle Security Operations rules can have two types of errors: compilation errors, which are found during saving or testing, and runtime errors, which occur during testing, live rule execution, or retrohunts.\u003c/p\u003e\n"],["\u003cp\u003eCompilation errors are identified by issues in rule syntax or logic and will prevent you from saving or testing a rule until they are fixed.\u003c/p\u003e\n"],["\u003cp\u003eRuntime errors may prevent a rule from completing and are indicated by a link in the Test rule results bar or the Detections page, allowing users to find more information about the error.\u003c/p\u003e\n"],["\u003cp\u003eErrors found within a rule may be pointed out by a red underline in the rules editor, however, more complex errors may not include a specific position.\u003c/p\u003e\n"],["\u003cp\u003eIf an unknown runtime error occurs, the system does not have a user message associated with the error, and users should contact their Google Security Operations representative for assistance.\u003c/p\u003e\n"]]],[],null,["# View rule errors\n================\n\nSupported in: \nGoogle secops [SIEM](/chronicle/docs/secops/google-secops-siem-toc)\n\nThere are two main types of errors that you can get from rules:\n\n- **Compilation errors**: identify problems in rule syntax or logic by performing static analysis.\n\n- **Runtime errors**: only occur when testing a rule, running a live rule, or running a retrohunt.\n\nCompilation errors\n------------------\n\nGoogle Security Operations identifies compilation errors when you save or test the rule.\n\nThe icon in the top left-hand corner of the rules editor indicates whether the\nrule has an error.\n\nClick errorto view error details in the **Runtime Error** dialog.\n\nIf there is no error in your rule, the icon is a green done. If the error message includes a column or line position,\nthat part of the rule is displayed with a red underline in the rules editor.\nMore complex errors don't included a position because they are caused by a combination of issues in multiple places.\n\nIf you try to save a rule or test a rule that has a compilation error, a runtime error is displayed.\nYou cannot save a rule or run a test\nuntil the compilation error is fixed.\n\nRuntime errors\n--------------\n\nRuntime errors are not displayed during compile time. Some runtime errors prevent a rule from\ncompleting, like `query took too long to execute`, which occurs sporadically.\nTo check if your rule has runtime errors, click **Run test** in the rules editor.\n\nIf a runtime error occurs, a link is displayed in the **Test rule results** bar\nthat gives more information about the error that occurred.\n\nIt is possible to get unknown runtime errors that don't have a useful\ndescription. This indicates that the system is encountering\nthis particular error for the first time and it doesn't have a user message associated with the error.\nIf this happens, contact your Google SecOps representative for assistance.\n\nIf a runtime error occurs during live rule or retrohunt execution, a link is\ndisplayed on the **Detections** page that gives more information about the error that occurred.\n\nSimilarly to test the rule, runtime errors that occur during live rule or retrohunt\nexecution have an indicator with clickable, underlined text that gives\nmore information about the error that occurred.\n| **Note:** It is possible for runtime errors to go away. This usually occurs because the error was caused by a bug in our system and we reprocessed the failing rules after the bug was fixed.\n\n**Need more help?** [Get answers from Community members and Google SecOps professionals.](https://security.googlecloudcommunity.com/google-security-operations-2)"]]
