I currently deployed ELK version 6.8.0 and i see my file in the sincedb not getting updated /data/registry-1 while the same config works fine in version 6.7.x.
My input file section below..
input {
  file {
    path => [ "/data/rm_logs/*.txt" ]
    start_position => beginning
    sincedb_path => "/data/registry-1"
    max_open_files => 64000
    type => "rmlog"
  }
}
Blow is the sincedb file ..
-rw-r--r-- 1 logstash logstash 0 Jun 1 07:18 /data/registry-1
Does anyone know why this is so, would appreciate any clue or help.