CEF parser doesnt support RFC 5424

[dicolanl]

Per the RFC. https://tools.ietf.org/html/rfc5424#section-6.2.1
there will be a Version field before the timestamp after
<34>1 2003-10-11T22:14:15.003Z mymachine.example.com process PID 01 - CEF:0.....

using 5424 doesnt get parsed correctly.