The primary Security Management server is configured as default Logging server. The secondary Management is the backup log server. After disconnecting the primary Management, the gateway does not automatically switch to sending logs to the backup server.
We can see failover of the Management HA and the loss of connectivity, but the session on port 257 on the gateway to the primary Management stays open and no session is being created to the backup log server.
