I try to define the params of stream_processing_timeout & stream_processing_max_faults ,and restart the graylog-server, now streams is OK…let me watch for a while
Find a message manually which according to you would match and try to “load message” in order to verify your stream rules. I guess it could be due to type mismatch in level (string vs int).