I honestly have a hard time to see how Filebeat could affect NTP as in the end it's just a binary that is execute as is Logstash or any other app.
Perhaps we can start from an other angle: What are the things on Windows that can have an affect on the NTP sync? Perhaps then I can think of ways how FB could affect these.