I have a weird issue with Graylog 2.5.
Messages are not getting matched into a stream, even though when I test the stream rules it says it matches.
They all end up default “all messages” stream.
Here is the screenshot of the message
And the screenshot of me testing the stream rules. It clearly says that " This message would be routed to this stream." Yet, the message is ending up in default stream.
Note that that only go to “All messages”, I don’t have a problem of duplicate.
Please help! Any advice is greatly appreciated.