I apologize, I was responding via E-mail and didn't notice the image link. I have to log in to view them. Your filter seems fine compared with the syslog message sample you provided.
Do you have any other filters in the same rule? And if so, what type? Screenshots for those would be helpful.