Sandor,
Thanks for the input. It was indeed the config file. I had a missing parameter on my config file. I missed the "or" after host("CentrevilleDS-TLS")  ha ha ha

# Let's intercept the logs with "Configured from console"

filter f_config_alert {
                        (
                          (
                            host("WWC-6509-DC1") or
                            host("WWC-6509-DC2") or
                            host("TLS-UUNet") or
                            host("6509-CE") or
                            host("SPRAGUE_MSFC") or
                            host("6509-Sprague-TLS") or
                            host("FCPSCAB-MSFC") or
                            host("MSFC-1-WWC") or
                            host("6509-WWC-TLS") or
                            host("FWSM") or
                            host("6509-720-POP-MSFC") or
                            host("WoodsonDS-TLS") or
                            host("ChantillyDS-TLS") or
                            host("OaktonDS-TLS") or
                            host("RockyRunDS-TLS") or
                            host("EdisonDS-TLS") or
                            host("FCPSCAB-3845") or
                            host("CentrevilleDS-TLS")
                            host("FCPS_FFCG")
                           ) and
                          match("Configured from console")
                        );
                       };