[Puppet Users] firewall chains?

I think I was able to define what is needed with the following. However,
log_level is not appearing in /etc/sysconfig/iptables. I'm using Puppet
3.2.2-1 on RHEL 6.4

Here's my manifest code in case anybody is interested.

         firewallchain { 'LOGGING:filter:IPv4':
                 ensure => present,
         }
         firewall { '998 jump to LOGGING':
                 chain => 'INPUT',
                 proto => 'all',
                 jump => 'LOGGING',
         }
         firewall { '991 LOGGING':
                 chain => 'LOGGING',
                 proto => 'all',
                 limit => '2/min',
                 log_level => 'warn',
                 #log_level => 4,
                 log_prefix => 'IP Tables Dropped Packet:',
                 jump => 'LOG',
         }
         firewall { '992 jump to DROP':
                 chain => 'LOGGING',
                 proto => 'all',
                 action => 'drop',
         }