Subramaniam,
I am pretty sure that this rule will, in fact, crash your LEM. The LEM will need to assign memory space for every matching event and then keep that memory assigned for 24 hours. That will need a lot of memory.
That said, the logic is pretty simple, and I'm attaching the rule for your use to this post.
Curtis