I have a All in One ESM. I am following the document "SIEM Foundations:Enable Correlation". When I try to create a Data source on my event Receiver for the McAfee Correlation Engine I receive the following error:
Only one Correlation data source allowed per receiver. (ER273)
I have searched the box and I do not have any other correlation engines running. Has anyone else ran into this issue or know how to correct it?
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.