We have checked filebeat configuration in each IIS servers and found same configuration setup also verified IIS log time format and other configurations. While filtering logs for past hour we could notice only 2 server logs were displayed. We are fetching log from 8 IIS server and parsing via Logstash to Elastic search Kibana. We are facing a time mismatch in displaying logs from different servers. We are having ELK setup with Kibana version 5.6.10.
