Filebeat 5.4.1 not updating registry when file closed/removed

Thanks for the detailed report. On a first glance I couldn't see anything special. On the machines that this issue happens, do you see any errors for sending events to LS? Could you put your log file into a gist and link it here?

What is the file system type you are using? By constantly attached you mean it is not mounted as a network volume, right?