I don't see any need for type => "bdu"
and remove from output
input {
file {
path => "/home/user/Documents/bdu/*.json" # is it documents or Documents?
start_position => "beginning"
sincedb_path => "/dev/null"
codec => "json"
}
}
output {
stdout { codec => rubydebug }
}
First start with debug, then go to opensearch.If this is multiline JSON, you have to use the multiline codec, check the sample.