Sorry, comment #13 had a cut-and-paste issue.
log message is, type=USYS_CONFIG msg=audit(1511898182.500:184): pid=3305 uid=0 auid=1000 ses=2 msg='op=change-system-time exe="/sbin/hwclock" hostname=artfulguest addr=? terminal=pts/0 res=success'
Sorry, comment #13 had a cut-and-paste issue.
log message is, 1511898182. 500:184) : pid=3305 uid=0 auid=1000 ses=2 msg='op= change- system- time exe="/sbin/hwclock" hostname= artfulguest addr=? terminal=pts/0 res=success'
type=USYS_CONFIG msg=audit(