SEPM Application and Device Control Logging Question

Hey guys,

This is feature is running circles on my now since yesterday. I can't seem to figure out how to log the application that's being used using SEPM.

This is our setting, basically we're trying log the users who use outlook.exe from the specific path below,

I also tried to do it without the "" in the file path but it still didin't log outlook.exe whenever I try to open it.

Anyone ever use this feature for this purpose?

Image may be NSFW.
Clik here to view.

Image may be NSFW.
Clik here to view.

Image may be NSFW.
Clik here to view.

Thank you,