Usually when there is a wildcard like (““) at the beginning of the pattern, Juniper SRX expects a character before the wildcard which can be matched one or multiple times. When we use a custom pattern with nothing preceding the wildcard (““) the device will experience core dump.