the process of obtaining the exact same time on multiple hosts. network time protocol (ntp) is a time synchronization protocol.
all server sending data to the siem should be synchronized with the same time. easier to know when the events occured
feature of a siem that makes sure all products are synced up so they are running with the same timestamps.