Hi @adcom26,
the one hour delay is continue or not? in other words: have you alwaus one hur delay or in some moments there's a delay of less than one hour?
if it isn't continue, see how the data are generated: if there's a script or how are generated the written files, because maybe there a delay in generation or copy.
If instead you have a continue delay of exactly one hour this is usually a timezone problem, see in the raw events if the timestamp of the event is the same of the time in the events, if it's the same check what's the real timezone of the data, if it's different, check the props.conf of your sourcetype.
Ciao.
Giuseppe
