NTP Events

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-8214/Content/fir-int.htm

https://www.arubanetworks.com/techdocs/AOS-CX/10.07/PDF/5200-8214.pdf

NTP Events

Base Rule

General NTP Information

Information

Device Key in Log Message

LogRhythm Schema

Data Type

Schema Description

Event ID

<vmid>

Number

Event ID 1101, 1102, 1103, 1104, 1105, 1106, 1107

Severity

<severity>

Text/String

For All: Information

Message

<subject>
<dname>
<action>

Text/String

Event ID 1101:
Logs NTP Association configuration changes

<subject>

Text/String

Event ID 1102:
Logs NTP Trusted and Untrusted authentication-keys

<subject>
<status>

Text/String

Event ID 1103:
Logs NTP Authentication state changes

<subject>
<status>

Text/String

Event ID 1104:
Logs NTP VRF configuration state changes

<subject>
<dname>

Text/String

Event ID 1105:
Logs NTP primary server connection established state change

<subject>
<dname>

Text/String

Event ID 1106:
Logs NTP primary server connection lost state change

<subject>
<status>

Text/String

Event ID 1107:
Event raised when NTP is changed to enabled or disabled