Exchange 2016 Message Tracking log config assistance

Thank you for your response i tried updating the code as you mentioned and it still appears to not function.

Panic Soft
#NoFreeOnExit TRUE

define ROOT     C:\Program Files (x86)\nxlog
define CERTDIR  %ROOT%\cert
define CONFDIR  %ROOT%\conf
define LOGDIR   %ROOT%\data
define LOGFILE  %LOGDIR%\nxlog.log
LogFile %LOGFILE%

Moduledir %ROOT%\modules
CacheDir  %ROOT%\data
Pidfile   %ROOT%\data\nxlog.pid
SpoolDir  %ROOT%\data

<Extension syslog>
 Module xm_syslog
</Extension>

define BASEDIR C:\Program Files\Microsoft\Exchange Server\V15

<Extension csv_parser>
    Module      xm_csv
    Fields      date_time, client_ip, client_hostname, server_ip, server_hostname, \
                source_context, connector_id, source, event_id, \
                internal_message_id, message_id, network_message_id, \
                recipient_address, recipient_status, total_bytes, recipient_count, \
                related_recipient_address, reference, message_subject, \
                sender_address, return_path, message_info, directionality, \
                tenant_id, original_client_ip, original_server_ip, custom_data, \
                transport_traffic_type, log_id, schema_version
</Extension>



<Input messagetracking>
    Module      im_file
    File        '%BASEDIR%\TransportRoles\Logs\MessageTracking\MSGTRK*.LOG'
    <Exec>
        if $raw_event =~ /^(\xEF\xBB\xBF)?(date_time,|#)/ drop();
        else
        {
            csv_parser->parse_csv();
            $EventTime = parsedate(${date_time});
        }
    </Exec>
</Input>


<Output out1>
 Module om_udp
 Host 10.1.1.1
 Port 514
 Exec to_syslog_snare();
</Output>


<Route 1>
 Path messagetracking => out1
</Route>

2018-07-16 12:07:50 ERROR Couldn't parse Exec block at C:\Program Files (x86)\nxlog\conf\nxlog.conf:39; couldn't parse statement at line 44, character 36 in C:\Program Files (x86)\nxlog\conf\nxlog.conf; invalid character: '$' (0x24)
2018-07-16 12:07:50 ERROR module 'messagetracking' has configuration errors, not adding to route '1' at C:\Program Files (x86)\nxlog\conf\nxlog.conf:59
2018-07-16 12:07:50 ERROR route 1 is not functional without input modules, ignored at C:\Program Files (x86)\nxlog\conf\nxlog.conf:59
2018-07-16 12:07:50 WARNING no routes defined!
2018-07-16 12:07:50 WARNING not starting unused module messagetracking
2018-07-16 12:07:50 WARNING not starting unused module out1
2018-07-16 12:07:50 INFO nxlog-ce-2.9.1716 started

Also testing with the trial version of enterprise version with the W3 parser. I should mention we are not beyond purchasing the enterprise edition if needed. We are simply looking for a solution that will be able to message tracking logs. So far both examples appear incorrect.

Panic Soft
define ROOT C:\Program Files\nxlog
ModuleDir %ROOT%\modules
CacheDir  %ROOT%\data
PidFile   %ROOT%\data\nxlog.pid
SpoolDir  %ROOT%\data

define CERTDIR %ROOT%\cert
define CONFDIR %ROOT%\conf

# Note that these two lines define constants only; the log file location
# is ultimately set by the `LogFile` directive (see below). The
# `MYLOGFILE` define is also used to rotate the log file automatically
# (see the `_fileop` block).
define LOGDIR %ROOT%\data
define MYLOGFILE %LOGDIR%\nxlog.log

# By default, `LogFile %MYLOGFILE%` is set in log4ensics.conf. This
# allows the log file location to be modified via NXLog Manager. If you
# are not using NXLog Manager, you can instead set `LogFile` below and
# disable the `include` line.
#LogFile %MYLOGFILE%
include %CONFDIR%\log4ensics.conf

<Extension _syslog>
    Module  xm_syslog
</Extension>

<Extension w3c_parser>
    Module      xm_w3c
    Delimiter   ,
</Extension>

<Input messagetracking>
    Module      im_file
    File        '%BASEDIR%\TransportRoles\Logs\MessageTracking\MSGTRK*.LOG'
    InputType   w3c_parser
</Input>

<Output tcp>
    Module      om_udp
    Host        10.1.1.1
    Port        514
    Exec to_syslog_snare()
</Output>

2018-07-16 12:19:53 ERROR Couldn't parse Exec block at C:\Program Files\nxlog\conf\nxlog.conf:44; couldn't parse statement at line 44, character 23 in C:\Program Files\nxlog\conf\nxlog.conf; function 'to_syslog_snare()' does not exist or takes different arguments
2018-07-16 12:19:53 ERROR SSL error, failed to load ca cert from 'C:\Program Files\nxlog\cert\agent-ca.pem', reason: No such file or directory, no such file, system lib
2018-07-16 12:19:53 WARNING no routes defined!
2018-07-16 12:19:53 INFO nxlog-4.0.3735-trial started
2018-07-16 12:19:53 WARNING not starting unused module tcp
2018-07-16 12:19:53 WARNING not starting module messagetracking because it is part of an incomplete route
2018-07-16 12:19:53 ERROR SSL error, failed to load ca cert from 'C:\Program Files\nxlog\cert\agent-ca.pem', reason: No such file or directory, no such file, system lib