Have you tried setting it to parse the whole directory for the logs? F:\Program Files\Attix5 Backup Professional SE\logs\*.log I have confirmed the log files do not tab delimit, but I still can't get this to parse the errors. I have created a set and shared it with you. Is this what you have for your Template? It may pay to open the template, and copy and paste one of the lines into the template field, and then replace the various sections with placeholders... this would guarantee you are matching the right characters in the string. If anyone can help, I have this as the logparsers.xml for this machine
<?xml version="1.0" encoding="ISO-8859-1" ?> <LogParser version="1.0" AgentID="87367884311199837408207267"> <LogParserDef ID="2"> <Params> <Param Name="MessageStatus" Type="string" ParamID="8" /> <Param Name="TimeStamp" Type="string" ParamID="9" /> <Param Name="ErrorMessage" Type="string" ParamID="10" /> </Params> <Templates MultiLine="0"> <Template>$MessageStatus$: $TimeStamp$ $ErrorMessage$</Template> </Templates> <OutputTemplate>$MessageStatus$ The following Error occurred $TimeStamp$ $ErrorMessage$</OutputTemplate> <LogPaths> <CurrentPath>F:\Program Files\Attix5 Backup Professional SE\logs\*.log</CurrentPath> <BackupPath></BackupPath> </LogPaths> <CollectionDef> <ConditionSet> <Condition Param="null" Operator="StartWith" Value="Warn" /> <Condition Param="null" Operator="StartWith" Value="Err" /> </ConditionSet> </CollectionDef> <Alarms> <AlarmDef ID="2" Duration="0" EventCount="1" ReArm="86400"> <ConditionSet> <Condition Param="null" Operator="StartWith" Value="Warn" /> <Condition Param="null" Operator="StartWith" Value="Err" /> </ConditionSet> </AlarmDef> </Alarms> </LogParserDef> </LogParser>