Great, thank you.
Those Grok patterns are definitely incompatible with the log examples you've provided. It looks like you'll need to add some extra patterns to cover the SMTP scenario.
We have a Grok debugger available at app/kibana#/dev_tools/grokdebugger which you can use to help with the creation of patterns.
Using the fields listed for the IIS module you'll be able to create a suitable pattern that follows
date time c-ip cs-username s-sitename s-computername s-ip s-port cs-method cs-uri-stem cs-uri-query sc-status sc-win32-status sc-bytes cs-bytes time-taken cs-version cs-host cs(User-Agent) cs(Cookie) cs(Referer)
Something like this should get you started:
%{TIMESTAMP_ISO8601:iis.access.time} %{IPORHOST:iis.access.remote_ip} %{NOTSPACE:iis.access.user_name} %{NOTSPACE:iis.access.site_name} %{NOTSPACE:iis.access.server_name} %{IPORHOST:iis.access.server_ip} %{INT:iis.access.port}
Hopefully that helps. If you need further help the Beats board will be able to advise you further on the Filebeat configuration.