What is a likely consequence if the NTP time sources are misconfigured across the Orion environment?

What is a likely consequence if the NTP time sources are misconfigured across the Orion environment?

• A. No impact on monitoring accuracy.
• B. Data retention is reduced.
• C. Time skew can lead to incorrect correlation and data attribution.
• D. Query performance improves.

Answer: (C)

Time synchronization across the Orion environment is essential because every metric, log, and event is stamped with a shared clock. When NTP sources are misconfigured, clocks drift apart, creating time skew among devices and pollers. This makes it hard to line up data from different components, so correlation across devices becomes unreliable and attributing a problem to the correct source can be wrong. Dashboards, reports, and alert sequences rely on accurate timelines, so misaligned times can show events in the wrong order or obscure their true sequence, complicating root cause analysis. The other options don’t reflect the primary impact: data retention isn’t directly determined by clock alignment, and while misconfiguration might indirectly affect performance or reporting, the most likely and immediate consequence is incorrect correlation and data attribution due to time skew.

Time synchronization across the Orion environment is essential because every metric, log, and event is stamped with a shared clock. When NTP sources are misconfigured, clocks drift apart, creating time skew among devices and pollers. This makes it hard to line up data from different components, so correlation across devices becomes unreliable and attributing a problem to the correct source can be wrong. Dashboards, reports, and alert sequences rely on accurate timelines, so misaligned times can show events in the wrong order or obscure their true sequence, complicating root cause analysis. The other options don’t reflect the primary impact: data retention isn’t directly determined by clock alignment, and while misconfiguration might indirectly affect performance or reporting, the most likely and immediate consequence is incorrect correlation and data attribution due to time skew.