You see a "datastore error" when adding an exception to "Allow DNS or host file changes" on the SONAR log from the Symantec Endpoint Protection Manager > Monitors > Logs > SONAR > View Logs.
This issue happens when there are multiple entries for the same application associated with the SONAR log in the SEM_APPLICATION table that have different last modified times.
This issue is fixed in Symantec Endpoint Protection Manager 14. For information on how to obtain the latest build of Symantec Endpoint Protection, read
TECH 103088: Download the latest version of Symantec Endpoint Protection
WORKAROUND: if upgrade not possible at the time the exception can be added manually in the centralized exception policies - Add - Windows Exception - DNS or host file exception