If you are using chrony for time sync in Security Analytics 8.4.1, it is possible that the NTP health test will fail.
The test is not actually failing. The results of the test are being parsed incorrectly.
This has been resolved in Security Analytics 8.4.1.2.