When a Linux machine with NTP capabilities will start and it does not find the NTP server, how it will determine the time? A clue I have is that it uses some heuristic method but I don't need what does that mean.
My main question is: How can I track such an event on a monitoring purpose?