What does Filebeat do about timestamps? Especially when "backpressure" feature is working.
More generally, how do I get synchronized timestamps?
On machines, time may misalign and, moreover, it may change while Filebeat is working. Therefore, it becomes impossible to see "surrounding" logs. On other hand, there is definitely possible to add some time synchronization logic.