FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
Arif69
Staff
Staff
Article Id 391046
Description This article explains each component in the 'diagnose system ntp status' command line.
Scope FortiManager and FortiAnalyzer.
Solution

The diagnose system ntp status has the same output as the chronyc sources command in bash.

 

Run the following command in FortiManager/FortiAnalyzer:

 

diagnose system ntp status

 

Screenshot 2025-05-09 123928.png

 

The following table explains each of the components of the output in the diagnose system ntp status:

 

Stratum

Stratum '2' in FortiAnalyzer is 2 hops away from the reference clock.

Poll

A value of 10 indicates FortiAnalyzer polls at a rate of 2^10 = 1024 seconds from the source.

Reach

Indicates reachability to source.

 

Notes:

In octal = 377.

In binary = 111111111.

1 = response was received (success).
0 = no response (missed).

LastRx

The last sample was received 935 seconds ago from the source.

Last sample

The last sample indicates the time differences between FortiAnalyzer and the source.

 

-600us = Actual measured differences.

-597us = Actual measured differences that are gradually adjusting themselves to match the source clock.

92ms = Margin of error in measurement. A positive value indicates FortiAnalyzer is ahead of the source for 92ms.