Question & Answer
Question
Is there a way to verify that a QRadar Network Security (XGS) sensor is synchronized with the Network Time Protocol (NTP) server?
Answer
You can check the status of the XGS sensor's NTP connection by using the following instructions:
- Connect to the XGS sensor via SSH and log in with the admin account.
- Enter the
stats showcommand. - Select option
10: NTP Time Driftfrom the list by entering the number 10.
- Within the output, you can verify that your configured NTP server has an asterisk (*) next to it, indicating the XGS is synced with that source.
Note: If the delay, offset, and jitter numbers are all 0, then the NTP server is likely unreachable.
[{"Product":{"code":"SSFSVP","label":"IBM QRadar Network Security"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"General Information","Platform":[{"code":"PF009","label":"Firmware"}],"Version":"5.4","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}},{"Product":{"code":"SSHLHV","label":"IBM Security Network Protection"},"Business Unit":{"code":"BU008","label":"Security"},"Component":"General Information","Platform":[{"code":"PF009","label":"Firmware"}],"Version":"5.3.3","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Was this topic helpful?
Document Information
Modified date:
23 January 2021
UID
swg22011003