Your comments

I just attempted to test this filter with ajenti.. I don't seem to see the entries in /var/log/auth.log. Is there some config that needs to be enabled in ajenti's config.json to enable syslogging?