Created on 06-16-2023 02:09 AM
This article describes a system event indicating NTPD clears active sessions 'User: from ntpd clean active IPv4 sessions'.
In general, when an admin user clears active sessions via GUI or CLI, a system event with a warning severity level is logged as below.
logid="0100036883" type="event" subtype="system" level="warning" vd="root" logdesc="Clear active sessions" user="admin" ui="console" method="console" msg="User:admin from console clean active IPv4 sessions,( filter:none)"
Meanwhile, when an NTPD daemon automatically clears active sessions to optimize NTP synchronization, a similar system event can be logged as below.
logid="0100036883" type="event" subtype="system" level="warning" vd="root" logdesc="Clear active sessions" ui="ntpd" method="unknown" msg="User: from ntpd clean active IPv4 sessions,( filter:sintf:<sintf>;dintf:<dintf>;proto:17-17;source port:123-123;dest port:123-123;)"
