Palo Alto High Precision Timestamp support

[ehlo550]

What the vendor name?
Palo Alto

What's the product name?
Firewall

Do you have syslog documentation or a manual for that device??

• 10.2

• 11.1 & Later

Feature Request description:
We have configured Palo IETF 5424 to port 601 and we sometimes have an issue

• sc4s runs ins UTC
• Palo Alto firewall in a different TZ
• sometimes we hit more than the 30 seconds for guess-timezone and then our logs are obviously in the wrong TZ

base on the slack discussion: https://splunkcommunity.slack.com/archives/CNV918JCQ/p1742564779654649

I would like to ask if it is possible to add support for the high precision timestamp

[rjha-splunk]

We will for sure check this but it will take some time considering our current commitment. we will be needing some pcap files as well for this , it can be uploaded by opening a support case and referring my name or github issue.

[ehlo550]

this was handled by #2728 right?