---
title: "Set-VBRVSAEventForwardingFilteringRule"
description: "This cmdlet returns a new VBRVSAEventForwardingFilteringRule object based on an existing rule, with the values you specify overriding the original application name and the array of forwarded severity levels."
canonical: "https://helpcenter.veeam.com/docs/vbr/powershell/set-vbrvsaeventforwardingfilteringrule.html"
breadcrumb: "Veeam PowerShell Reference > Veeam PowerShell Reference > Backup Infrastructure > Veeam Backup & Replication Settings > Configuring Veeam Software Appliance Event Forwarding > Set-VBRVSAEventForwardingFilteringRule"
dateModified: "2026-08-19"
---

# Set-VBRVSAEventForwardingFilteringRule

## Short Description
Returns an updated copy of an advanced filtering rule for Veeam Software Appliance syslog event forwarding.

**Product Edition**: Veeam Universal License

## Syntax
```
Set-VBRVSAEventForwardingFilteringRule [-Application <String>]
 [-SeverityRules <VBRSyslogServerEventSeverity[]>] -FilteringRule <VBRVSAEventForwardingFilteringRule> [<CommonParameters>]
```

## Detailed Description
This cmdlet returns a new [`VBRVSAEventForwardingFilteringRule`](vbrvsaeventforwardingfilteringrule.md) object based on an existing rule, with the values you specify overriding the original application name and the array of forwarded severity levels.

::: note

This cmdlet does not save changes to the configuration database. To apply the updated rule, pass the returned object to the [`Set-VBRVSAEventForwardingOptions`](set-vbrvsaeventforwardingoptions.md) cmdlet with the `AdvancedFilters` parameter.

:::

## Parameters

<table style="width:100%;" class="Blue_Table">
      <tr style="vertical-align:top">
        <th style="width:20%;">
          <p>Parameter</p>
        </th>
        <th style="width:20%;">
          <p>Description</p>
        </th>
        <th style="width:20%;">
          <p>Type</p>
        </th>
        <th style="width:10%;">
          <p>Required</p>
        </th>
        <th style="width:10%;">
          <p>Position</p>
        </th>
        <th style="width:10%;">
          <p>Accept Pipeline Input</p>
        </th>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">Application</span></p>
        </td>
        <td>
          <p>Specifies the name of the application or daemon to which the rule applies.</p>
        </td>
        <td style="width:10%;">
          <p><code>String</code></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">FilteringRule</span></p>
        </td>
        <td>
          <p>Specifies the existing filtering rule that the cmdlet uses as the base for the updated copy.</p><p>Accepts the <a href="vbrvsaeventforwardingfilteringrule.md"><code>VBRVSAEventForwardingFilteringRule</code></a> object. To create this object, run the <a href="new-vbrvsaeventforwardingfilteringrule.md"><code>New-VBRVSAEventForwardingFilteringRule</code></a> cmdlet, or retrieve one from the <code>AdvancedFilters</code> property of <a href="get-vbrvsaeventforwardingoptions.md"><code>Get-VBRVSAEventForwardingOptions</code></a>.</p>
        </td>
        <td style="width:10%;">
          <p><a href="vbrvsaeventforwardingfilteringrule.md"><code>VBRVSAEventForwardingFilteringRule</code></a></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">SeverityRules</span></p>
        </td>
        <td>
          <p>Specifies an array of severity levels that the appliance will forward for the application. Accepted values:</p><ul><li><code>Emergency</code></li><li><code>Alert</code></li><li><code>Critical</code></li><li><code>Error</code></li><li><code>Warning</code></li><li><code>Notice</code></li><li><code>Informational</code></li><li><code>Debug</code></li></ul>
        </td>
        <td style="width:10%;">
          <p><code>VBRSyslogServerEventSeverity[]</code></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
    </table>

`<CommonParameters>`

This cmdlet supports Microsoft PowerShell common parameters. For more information on common parameters, see [ Microsoft Docs](https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_commonparameters?view=powershell-7).

## Output Object
[`VBRVSAEventForwardingFilteringRule`](vbrvsaeventforwardingfilteringrule.md)

## Examples

::: example
### Example 1. Modifying Severity Levels for Filtering Rule

This example shows how to build a copy of an existing filtering rule with new severity levels, and apply the updated rule to the appliance.

```
$options = Get-VBRVSAEventForwardingOptions
$rule = $options.AdvancedFilters[0]
$updatedRule = Set-VBRVSAEventForwardingFilteringRule -FilteringRule $rule -SeverityRules Emergency, Alert, Critical
Set-VBRVSAEventForwardingOptions -AdvancedFilters @($updatedRule)
```

Perform the following steps:

1. Run the [`Get-VBRVSAEventForwardingOptions`](get-vbrvsaeventforwardingoptions.md) cmdlet. Save the result to the `$options` variable.
2. Get the first filtering rule from the `AdvancedFilters` property of the `$options` variable. Save the result to the `$rule` variable.
3. Run the `Set-VBRVSAEventForwardingFilteringRule` cmdlet to build the updated rule. Save the result to the `$updatedRule` variable. Specify the following settings:

   - Set the `$rule` variable as the `FilteringRule` parameter value.
   - Set `Emergency`, `Alert` and `Critical` as the `SeverityRules` parameter value.

4. Run the [`Set-VBRVSAEventForwardingOptions`](set-vbrvsaeventforwardingoptions.md) cmdlet to persist the change. Pass the `$updatedRule` variable wrapped in an array as the `AdvancedFilters` parameter value.

:::

::: example
### Example 2. Renaming Application for Filtering Rule

This example shows how to build a copy of an existing filtering rule with a different application name, and apply the updated rule to the appliance.

```
$options = Get-VBRVSAEventForwardingOptions
$rule = $options.AdvancedFilters[0]
$updatedRule = Set-VBRVSAEventForwardingFilteringRule -FilteringRule $rule -Application "sshd"
Set-VBRVSAEventForwardingOptions -AdvancedFilters @($updatedRule)
```

Perform the following steps:

1. Run the [`Get-VBRVSAEventForwardingOptions`](get-vbrvsaeventforwardingoptions.md) cmdlet. Save the result to the `$options` variable.
2. Get the first filtering rule from the `AdvancedFilters` property of the `$options` variable. Save the result to the `$rule` variable.
3. Run the `Set-VBRVSAEventForwardingFilteringRule` cmdlet to build the updated rule. Set the `$rule` variable as the `FilteringRule` parameter value. Specify `sshd` as the `Application` parameter value. Save the result to the `$updatedRule` variable.
4. Run the [`Set-VBRVSAEventForwardingOptions`](set-vbrvsaeventforwardingoptions.md) cmdlet to persist the change. Pass the `$updatedRule` variable wrapped in an array as the `AdvancedFilters` parameter value.

:::

## Related Commands

- [`New-VBRVSAEventForwardingFilteringRule`](new-vbrvsaeventforwardingfilteringrule.md)
- [`Get-VBRVSAEventForwardingOptions`](get-vbrvsaeventforwardingoptions.md)