Showing results for 
Search instead for 
Did you mean: 

ProTip for SIEM: : Access Denied (ER70) - (when adding or modifying a Data Source)

After re-imaging (via ISO) or during a new installation of a SIEM "combo box" (ESM/REC/ELM) you might not be able to create or modify Receiver Data Sources. Specifically, when you attempt to add a new Data Source (or modify an existing one) you see the following error message in the ESM user interface:

Access Denied (ER70)

The message suggests that the user might not have the required permissions; however, this issue is usually a permissions issue related to the device itself and not the user (logging in as a different user has no effect).

For more information and a solution to this issue, see KB87295 (

Version history
Revision #:
1 of 1
Last update:
‎08-02-2016 07:47 AM
Updated by: