If you haven't done so add a logging action or display action to the rule. This will help determine what the filter is matching.
What is your filter doing? Can you make it less specific and see what happens? For example, if you are looking for a specific hostname AND a message text string disable the text string and see if the hostname starts logging.
Clik here to view.
