This article provides brief information on what to check if the filter flags/counters do not work.
All Kiwi Syslog versions
The issue is caused when another rule with an action of "Reset Flags/Counters" which causes the filter to not work properly.
Note: Check the rules one by one as there might be an incorrect action selected.
Sometimes you might see the title of the action as Log to Syslog Web Access but when you click on this item, a different action is selected and most of the time it is the Reset Flags/Counters.