Open topic with navigation

Time/NTP

This topic applies to Logger Appliances only.

You do not need to configure the time, date, or time zone for a Software Logger. Software Loggers use the operating system’s settings for the time and time zone.

The Time/NTP tab enables you to configure system time, date, local timezone, and NTP servers. Micro Focus strongly recommends using an NTP server instead of manually configuring the time and date on your system.

Precise timestamping of events is also critical for accurate and reliable log management. The times displayed for Logger operations such as searches, reports, and scheduled jobs are in the Logger’s local time zone.

To set or change the system time, date, or time zone manually:

  1. Click System Admin from the top-level menu bar.
  2. Click Network in the System section.

  3. In the Time/NTP tab, configure these settings. 

    Setting

    Description

    Current Time Zone

    The time zones appropriate to your system’s location. To change this setting, click Change Time Zone…

    Local times zones follow the Daylight Savings Time (DST) rules for that area. Greenwich Mean Time (GMT) + and - time zones are DST-agnostic.

    For example, the America/Los Angeles time zone varies by an hour compared with GMT when DST goes into and out of effect.

    • Pacific Standard Time (PST) = GMT+8
    • Pacific Daylight Time (PDT) = GMT+7
    Appliances using GMT are inverted by design. To display the correct information, make sure to select a specific location as the time zone.

    Current Time

    The current date and time at the system’s location. To change this setting, click Change Date/Time…

  4. The Time Zone change requires that you reboot the appliance. However, the Current Time change takes effect immediately.

    Caution: If you manually set the date and time settings and are also using an NTP service, the date and time entered manually cannot be more than 16 minutes ahead of or behind the time that the NTP server is providing. If the manually entered time is more than 16 minutes different from the NTP server time, then the NTP service will fail to start.

To configure your system as an NTP server or for using an NTP server for your system:

  1. Click System Admin from the top-level menu bar.
  2. Click Network in the System section.
  3. Click the Time/NTP tab.

  4. Under NTP Servers, configure these settings.

    To add a new NTP server, click the icon. To remove a server, click the icon. To change the order in which the NTP servers should be used, select a server and click the up or down arrow until the NTP server is in the desired position.  

    Setting

    Description

    Enable as an NTP server

    Check this setting if this system should be used as an NTP server.

    NTP Servers

    Enter the host name of an NTP server. For example, time.nist.gov.

    Micro Focus recommends using at least two NTP servers to ensure precise time on your system. To enter multiple NTP servers, type one server name per line.

    Once you add servers to this list, you can click the “Click to Test” link to verify if the servers that you added are reachable from your system.

    • An ArcSight system can serve as an NTP server for any other ArcSight system.
    • If System A serves as an NTP server for System B, System B needs to list System A in its NTP Servers list.
    • Use the Test Servers button to verify the status of the servers entered into the NTP Servers box.

  5. Click Save.

    Tip: You may need to scroll down to view the Save button and Restart NTP Service.

  6. Click Restart NTP Service to put the changes into effect.

Concept Link IconSee Also