index_start.scrub {multi(debug,type=regex,pattern="HHmmss")||"program_stime":"(\d{6})"||}
index_stop.scrub {multi(type=regex,pattern="HHmmss")||"program_etime":"(\d{6})"||}
In the above code if the time below 24 hours the pattern works properly, but when it is above 24 hours up then an error occurs.
What about the solution?
Or you can replace index_start.modify{replace|24:00|00:00} and stop of course