Last updated · reviewed for accuracy
NTP & syslog
The two least glamorous services on any network decide whether outages are debuggable. NTP keeps every device’s clock within milliseconds of true; syslog ships every device’s events to one place. Together they turn “something broke somewhere” into a timeline you can actually read.
The lesson’s exercise is brutal and instructive: diagnose a fault from logs whose clocks disagree by four minutes.