hobbit-clients.cfg LOG configuration

Hi,

In hobbit-clients.cfg LOG configuration, I want to catch critical event lines, which have the keyword "EventID" and either keyword of failed, failure or error. Looks this line doesn't work, any idea please?

LOG /var/log/messages %EventID.*(failed|failure|error)

thanks,

Geng