Troubleshooting: Invalid access key error while configuring Advanced Threat Analytics in EventLog Analyzer
Issue description
This issue occurs while configuring Advanced Threat Analytics in EventLog Analyzer.
Possible cause
- EventLog Analyzer build is lower than 12550.
- The access key may not copy correctly if the browser is zoomed in and a scroll-bar appears.
- Browser zoom can shift focus or affect how the access key element is rendered, causing copy failures.
Prerequisites
- Ensure you have administrator access to EventLog Analyzer.
- Allow the URLs "https://log360feeds.manageengine.com/" and "https://log360cloud.manageengine.com/" to establish a connection to the Threat Server without firewall restrictions.
Steps to follow
Case 1: EventLog Analyzer build is lower than 12550
EventLog Analyzer has improved authentication security for the Advanced Threat Analytics add-on integrated with Log360 Cloud Threat Analytics. This version introduces IP-based restriction for API key usage, ensuring that any API call initiated from an unauthorized IP address is automatically blocked. This enhancement prevents API abuse and significantly strengthens authentication security.
EventLog Analyzer has improved authentication security for the Advanced Threat Analytics add-on integrated with Log360 Cloud Threat Analytics. This version introduces IP-based restriction for API key usage, ensuring that any API call initiated from an unauthorized IP address is automatically blocked. This enhancement prevents API abuse and significantly strengthens authentication security.
- Access the EventLog Analyzer UI from an Incognito Window or guest mode
- Check the current EventLog Analyzer build number.
- To know the Build number and version - In your EventLog Analyzer please click on "?" At the right top corner and click on "About".
- If the build is lower than 12550, upgrade the product to version 12550 or above.
- After upgrading, log in to the Log360 Cloud Threat Feed server using the licensed email and generate a new access key.
- Reconfigure Advanced Threat Analytics in EventLog Analyzer using the newly generated key.
Case 2: Screen zoom or high‑resolution display affects copying the access key
- Access the EventLog Analyzer UI from an Incognito Window or guest mode
- Log in to the Log360 Cloud Threat Feed server with the same email addressed used for licensing.
- If the access key does not copy correctly, reduce the browser zoom level until the scrollbar of the Log360 Cloud Threat Analytics window disappears.
- Try copying the access key again after adjusting the zoom.
- Reconfigure Advanced Threat Analytics using the correctly copied key.
Tips
- Ensure the access key is generated using the same licensed email account used to purchase the Log360 Cloud Threat Analytics license.
- Confirm that no firewall or proxy is blocking the connection to the required URLs.
- Use an updated browser for consistent UI behavior.
- Ensure the access key is generated using the licensed email account on the Log360 Cloud Threat Feed server.
- Confirm that no firewall or proxy is blocking the connection to the required URLs.
- Use an updated browser for consistent UI behavior.
How to reach support
For further assistance, contact ManageEngine Support with the following details:
- EventLog Analyzer build number
- Screenshot of the error message
- Kindly compress the below and upload it to the given link,
- <Dir>\ManageEngine\EventLogAnalyzer\logs folder
- Upload link: https://bonitas.zohocorp.com/ (Please select the product as Eventlog Analyzer, Enter your email address, and in comments mention the reason for log upload )
New to ADSelfService Plus?
Related Articles
Troubleshooting: Unable to Access EventLog Analyzer User Interface
Issue description You may not be able to access EventLog Analyzer user interface or web console in your browser or over multiple machines thou EventLog Analyzer is running as service/console mode. This article offers possible cause and step by step ...How to add Pulsedive Threat Intelligence as a threat feed manager in EventLog Analyzer
Objective It's essential to have multiple threat feed managers integrated with a SIEM solution to detect threats in the production environment. This article shows you how to add Pulsedive Threat Intelligence as a threat feed manager in EventLog ...How to add IBM X-Force as a threat feed manager in EventLog Analyzer
Objective It is essential to have multiple threat feed managers integrated with a SIEM solution to detect threats in the production environment. This article focuses on how to add IBM X-Force as a threat feed manager in EventLog Analyzer. ...How to add Cyware Threat Intelligence Platform as a threat feed manager in EventLog Analyzer
Objective It is essential to have multiple threat feed managers integrated with a SIEM solution to detect threats in the production environment. This article focuses on how to add Cyware Threat Intelligence Platform as a threat feed manager in ...How to add Sectrio Threat Intelligence as threat feed manager in EventLog Analyzer?
Objective It is essential to have multiple threat feed managers integrated with a SIEM solution to detect the threats in the production environment. This article focuses on how to add Sectrio Threat Intelligence as a threat feed manager in EventLog ...