Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 37 Source: W32Time

Source
Level
Description
The time provider NtpClient is currently receiving valid time data from <domain>.
Comments
 
This is a very important event from the System event log, where you can see if time synchronization is successful or not. You can also see the IP addresses and ports that the NTP synchronization is using.

If you are experiencing with time synchronization issues please follow:

1. Click Start, click Run, type cmd, and then press Enter.
2. At the command prompt, type the following commands in the order that they are given. After you type each command, press Enter:
w32tm /config /manualpeerlist:NTP_server_IP_Address, 0x8 syncfromflags:MANUAL
net stop w32time
net start w32time
w32tm /resync
See ME875424 for more details.
This message is caused when the NTP client is synchronizing its time with the specified NTP server. In an Active Directory Domain, this would be the PDC Emulator by default.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...