Windows event logs not showing messages

I have problem while sendig message to from nsclient to nagios. when I read application event log from Windows server 2008 everything is OK. But from System event log message field is empty (syntax works only for %source% %id%). How to fix it?

my config in nsclient:
###############################
[/modules]
; NSCAClient – Passive check support over NSCA.
NSCAClient = enabled
SimpleCache = enabled
CheckEventLog = enabled

[/settings/eventlog]
buffer_size=128000

[/settings/eventlog/real-time]
enabled = true
debug = 1

[/settings/eventlog/real-time/filters/win.eventlog.error]
severity=CRITICAL
filter= level IN (error) AND id NOT IN (12289,106,38,4) AND (id NOT IN (0) OR source NOT IN (‘test’))
target=NSCA,CACHE
maximum age= 1d
syntax= %source% %id%: %message%
ok message=Eventlog found no records
################################