ok, my bad, it looks like the # character is in the data.
The answer is: you are using multiline, meaning that the message field starts with # User@Host - it will never start with # administrator or # Time
Magnus answered this here How to drop a message