Description:
How to verify that the system time was changed?

How to verify that the system time was changed?

Windows environment

================

1). Go to the Windows Event Viewer.

2).  Create Custom View with the following setting:

Event level: information
Event logs: Windows Logs => System
Event sources: Kernel-General

keywords: Time

3). View the Customer View you just created. If there was a system time change, you should notice the logging items similar to the following:

The system time has changed to ?2015?-?10?-?29T21:07:18.500000000Z from ?2015?-?10?-?29T19:37:46.560054200Z.

Linux environment

==============

Run the following command:

grep ntp /var/log/messages*

If there was a system time change, you should notice something similar to the following:

messages.4:Oct  3 19:49:15 jms02 ntpd[2318]: synchronized to 10.106.0.15, stratum 2
messages.4:Oct  3 20:34:31 jms02 ntpd[2318]: time reset -0.129615 s
messages.4:Oct  3 20:37:52 jms02 ntpd[2318]: synchronized to 10.106.0.253, stratum 2
messages.4:Oct  3 20:46:22 jms02 ntpd[2318]: synchronized to 10.106.0.15, stratum 2
messages.4:Oct  3 20:53:52 jms02 ntpd[2318]: synchronized to 10.106.0.253, stratum 2
messages.4:Oct  3 21:00:23 jms02 ntpd[2318]: synchronized to 10.106.0.15, stratum 2
messages.4:Oct  3 22:22:06 jms02 ntpd[2318]: time reset -0.137264 s