System clock

1actions

1reasons

1sources

Livestatus

The clock of the host the event came from.

Identified by: sparklogs.config_change.target, which carries a fixed name where a host carries only one.

Action	Reported by	What that reason says
updated	system_time_changed on Windows Security event log	The system clock was changed. Routine time-service adjustments are quiet; changes from other processes are treated as integrity events.