Never mind. After I posted it, I noticed the "s" at the end of "message" in match field.
It started working after I changed the match field to:
match => { "message" => "%{COMBINEDAPACHELOG}"}
I left my original question here in case somebody else makes the same mistake.
Thanks,