This article describes the issue of Syslog traffic being sent only via the internal/management port of the leader node in a cluster.
Problem or Goal
In an A/A or A/P cluster, if the syslog server is configured for both nodes, the syslog traffic is sent via only the internal port of the Node, which is the leader.
The syslog traffic is sent via only the management port of the leader node, if it is configured.
The expected behavior in a cluster configuration (if log synchronization is enabled) is only the leader node in the cluster will send logs to the syslog server. The nodes, which is not the leader, will not send the syslog messages, as its log messages are sent by the leader.
Under Cluster properties, disable the Synchronize log messages option. This means each node will send its own logs to the syslog server.