Intel Security SNS ProTip for SIEM: Maximum number of allowed devices reached

Version 1

    The McAfee SIEM Receiver provides the ability to work with multiple data sources. Occasionally, when users attempt to add a new source, they see the following error:

     

    Maximum number of allowed devices reached (ER73)

     

    Because SIEM is hard-coded to allow only 2,000 parent/child data sources, this typically means that limit has been exceeded. Often, this is the result of misconfigured or poorly organized data sources. Intel Security recommends that you have a maximum of 1,000 parent/child data sources, with the availability of 255 client data sources per parent data source.

     

    For more information, see KB83884 (https://kc.mcafee.com/corporate/index?page=content&id=KB83884) and PD25226 (https://kc.mcafee.com/corporate/index?page=content&id=PD25226)

     

    For more resources, visit the  ServicePortal and search for related content. Also, visit the McAfee SIEM Community https://community.mcafee.com/community/business/siem.

     

    SNS ProTips help you maximize your protection with troubleshooting, best practices, how-to tips, and links to Knowledge Center resources. To unsubscribe from ProTips or change your SNS settings, visit the SNS Subscription Center.