Can Time change in a server can be monitored through SiteScope? (80 Views)
Reply
Frequent Advisor
PremRao
Posts: 48
Registered: ‎03-20-2013
Message 1 of 4 (80 Views)

Can Time change in a server can be monitored through SiteScope?

Dear All,

 

   please advice if the time change in a server can be monitored through SiteScope.  The scenario here is one of the critical server frequently changes it's time and noone has a clue about.  Because of this issue, there are some policies in the server which do not run as sheduled.  Please advice.

 

Regards,

 

Prem 

Please use plain text.
HP Expert
jmmirchev
Posts: 454
Registered: ‎09-14-2012
Message 2 of 4 (78 Views)

Re: Can Time change in a server can be monitored through SiteScope?

[ Edited ]

Hi Prem ,

 

 You wanted to monitor if the server shifted time , compared to a time server ?

Maybe you could use windows event log monitor and check for certain events: http://www.stevebunting.org/udpd4n6/forensics/timechange.htm

 

Let me know if this helps!

 

Yordan


Yordan Mirchev
HP Support

If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.

If you haven’t tried it yet, come and join us in our entitled forums at Support Customer Forums
Please use plain text.
Frequent Advisor
PremRao
Posts: 48
Registered: ‎03-20-2013
Message 3 of 4 (60 Views)

Re: Can Time change in a server can be monitored through SiteScope?

Dear Yordan,

 

   Thanks for the response, windows event log monitor and monitor the following process?

 

C:\Windows\system32\rundll32.exe

 

 

will monitoring the above process help me in server shifted time? The link does not mention which service/process to be monitored to get the results.

 

When I try to configure the Windows Event Log, I see the following lognames which can be monitored:-

 

Application
Hardware events
Key Management Service
Operations Manager
Security
System
Windows PowerShell

 

Out of which which is the one I need to use?  Kindly let me know as this is one of the important requirements.

 

 

Regards,

 

Prem

Please use plain text.
HP Expert
jmmirchev
Posts: 454
Registered: ‎09-14-2012
Message 4 of 4 (52 Views)

Re: Can Time change in a server can be monitored through SiteScope?

Hi Prem ,

 

 If we select to use the windows event log monitor (I am sure that there are other solutions to that , still this would be the easiest one I could think of), there might be some additional preparations to do on the system. I've done some research and found the following information , hope it helps :

 

http://support.microsoft.com/kb/307937

 

http://windowsitpro.com/systems-management/tracking-system-time-changes

 

http://forensic4cast.com/2011/01/detecting-cmos-clock-changes/

 

Note , as there might be diffrent reasons for the time shift maybe it would be a good idea to check arround the last time the issue occured and find a specific event that come with the change (the articles above may hepl if you are not sure what exactly you are looking for). Then you could use this event as a reference point and configure the event monitor based on that.

 

Hope this helps !

 Yordan


Yordan Mirchev
HP Support

If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.

If you haven’t tried it yet, come and join us in our entitled forums at Support Customer Forums
Please use plain text.
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation