The McAfee SIEM Receiver provides the ability to work with multiple data sources. Occasionally, when users attempt to add a new source, they see the following error:
Maximum number of allowed devices reached (ER73)
Because SIEM is hard-coded to allow only 2,000 parent/child data sources, this typically means that limit has been exceeded. Often, this is the result of misconfigured or poorly organized data sources. Intel Security recommends that you have a maximum of 1,000 parent/child data sources, with the availability of 255 client data sources per parent data source.
For more information, see KB83884 (https://kc.mcafee.com/corporate/index?page=content&id=KB83884) and PD25226 (https://kc.mcafee.com/corporate/index?page=content&id=PD25226)
For more resources, visit the ServicePortal and search for related content. Also, visit the McAfee SIEM Community https://community.mcafee.com/community/business/siem.
SNS ProTips help you maximize your protection with troubleshooting, best practices, how-to tips, and links to Knowledge Center resources. To unsubscribe from ProTips or change your SNS settings, visit the SNS Subscription Center.