Technical Tip: NTP configuration and verifying NTP health check on FortiAnalyzer BigData
| Description | This article describes how to configure, monitor, and manually verify an NTP server Health Check, along with the required steps after changing NTP settings. |
| Scope | FortiAnalyzer BigData. |
| Solution | NTP Configuration:
Configure an NTP server on FortiAnalyzer Big Data.
NTP Changes and Kudu Restart:
NTP settings are synchronized to the backend automatically, but not applied to Kudu until a restart. A notification will appear indicating a restart is required.
Verification of NTP: Step 1: Navigate to Health Dashboard
It can also be executed by selecting NTP Health Check and running Test:
Configuring the schedule for NTP Health Check:
Locate NTP Health Check and select Configure.
This configuration allows for how frequently the NTP health check should be executed or the intervals at which the NTP health check will run. Internally, this is being executed by a crontab job.
Settings: Enable Auto-remediation.
Viewing the Last NTP health check result:
Manual NTP verification:
To perform a manual check using the CLI, run the following command from the controller blade:
Or: Using a manual chronyd by specifying a server:
chronyd -Q -t 15 'server x.x.x.x iburst' <------ x.x.x.x is NTP server address.
Successful output indicates a working NTP. Failure indicates a connectivity or configuration issue.
Additional guidance:
CLI example to configure an NTP server:
NTP multi-server behavior: FAZBD synchronizes with multiple NTP servers and automatically selects the best one based on stratum, reachability, offset, and latency.
Impact of adding new NTP servers: No impact if the server passes checks. If no valid NTP server is available, the database will not start. |










