but seems it’s lacking the where-clause if you’d want only some of the fields or do parsing, hm.
You can try doing
/system logging add topics=ntp action=memory
The default logging settings are “any component, levels info/error/warning/critical”.
This will add “component ntp, any level” so including detail and debug messages.
Maybe that will include “clock synchronized” entries.