[AusNOG] Graylog router messages

[Paul Gear]

On 01/03/17 15:25, Steve Hille wrote:
> The whole network runs off a particular NTP source, which the Graylog
> server also runs off and can be seen below:

Not that this is likely related to the cause of your problem, but it's
not good practice to sync a whole network from *a* particular NTP source
(i.e. only one).

I recently gave a talk about this, and other NTP best practices:
https://linux.conf.au/schedule/presentation/112/ (video & slides at
https://sysadmin.miniconf.org/programme17.html)

Paul