Intel Security SNS ProTip for SIEM: Maximum number of allowed devices reached

Version 1

    The McAfee SIEM Receiver provides the ability to work with multiple data sources. Occasionally, when users attempt to add a new source, they see the following error:


    Maximum number of allowed devices reached (ER73)


    Because SIEM is hard-coded to allow only 2,000 parent/child data sources, this typically means that limit has been exceeded. Often, this is the result of misconfigured or poorly organized data sources. Intel Security recommends that you have a maximum of 1,000 parent/child data sources, with the availability of 255 client data sources per parent data source.


    For more information, see KB83884 ( and PD25226 (


    For more resources, visit the  ServicePortal and search for related content. Also, visit the McAfee SIEM Community


    SNS ProTips help you maximize your protection with troubleshooting, best practices, how-to tips, and links to Knowledge Center resources. To unsubscribe from ProTips or change your SNS settings, visit the SNS Subscription Center.