I currently deployed ELK version 6.8.0
and i see my file in the sincedb not getting updated /data/registry-1
while the same config works fine in version 6.7.x
.
My input file section below..
input {
file {
path => [ "/data/rm_logs/*.txt" ]
start_position => beginning
sincedb_path => "/data/registry-1"
max_open_files => 64000
type => "rmlog"
}
}
Blow is the sincedb
file ..
-rw-r--r-- 1 logstash logstash 0 Jun 1 07:18 /data/registry-1
Does anyone know why this is so, would appreciate any clue or help.