If type is text the wrong key is read in line https://github.com/memorycraft/fluent-plugin-sumologic/blob/master/lib/fluent/plugin/out_sumologic.rb#L62 This should be record['log'] instead of record['message']