NTP Messages
Classification
Rule Name | Rule Type | Classification | Common Event |
---|---|---|---|
NTP Messages | Base Rule | General NTP Information | Information |
Kernel Time Sync | Sub Rule | System Time Information | Information |
Positive Time Adjustment | Sub Rule | Time Adjusted | Information |
Negative Time Adjustment | Sub Rule | Time Adjusted | Information |
NTP: Listening On Router Socket | Sub Rule | Listener Message | Information |
NTP: Peers Refreshed | Sub Rule | Peers Refreshed | Information |
NTP Precision | Sub Rule | General NTP Information | Information |
No Suitable Time Synchronization Server Found | Sub Rule | NTP Server Unreachable | Error |
Mapping with LogRhythm Schema
Device Key in Log Message | LogRhythm Schema | Data Type |
---|---|---|
SYSD | <severity> | Text/String |
Mar 20 17:03:59 | <dname> | Text/String |
N/A | <process> | Text/String |
Your | <object> | Text/String |
N/A | <dip> | IP Address |
N/A | <dinterface> | Text/String |
N/A | <version> | Number |
N/A | <duration> | Time |
proto: | <tag1> | Text/String |
usec | N/A | N/A |
N/A | <tag2> | Text/String |