Well, just a minor correction in Falko's example jail.local section,

as copied verbatim below: 

[apache]

enabled = true
port    = http
filter  = apache-auth
logpath = /var/log/apache*/*error.log
maxretry = 5

the variable logpath above should point to:

logpath = /var/log/apache*/*access.log

That's all