---
title: "Set-VBRVSAEventForwardingOptions"
description: "This cmdlet modifies Veeam Software Appliance syslog event forwarding settings. You can enable or disable forwarding, configure the target syslog server, choose to reuse the Veeam Backup & Replication server syslog options, and define the default..."
canonical: "https://helpcenter.veeam.com/docs/vbr/powershell/set-vbrvsaeventforwardingoptions.html"
breadcrumb: "Veeam PowerShell Reference > Veeam PowerShell Reference > Backup Infrastructure > Veeam Backup & Replication Settings > Configuring Veeam Software Appliance Event Forwarding > Set-VBRVSAEventForwardingOptions"
dateModified: "2026-08-19"
---

# Set-VBRVSAEventForwardingOptions

## Short Description
Modifies Veeam Software Appliance syslog event forwarding settings.

**Product Edition**: Veeam Universal License

## Syntax
```
Set-VBRVSAEventForwardingOptions [-EnableSyslogForwarding] [-UseBackupServerSyslogOptions]
 [-ServerName <String>] [-Port <Int32>] [-TransportProtocol <VBRSyslogServerProtocol>]
 [-SeverityRules <VBRSyslogServerEventSeverity[]>] [-AdvancedFilters <VBRVSAEventForwardingFilteringRule[]>] [<CommonParameters>]
```

## Detailed Description
This cmdlet modifies Veeam Software Appliance syslog event forwarding settings. You can enable or disable forwarding, configure the target syslog server, choose to reuse the Veeam Backup & Replication server syslog options, and define the default severity levels and per-application filtering rules.

::: note

To modify settings, specify new values for the necessary parameters. The cmdlet will overwrite the previous parameter values with new values. The parameters that you omit will remain unchanged.

:::

::: note

You cannot specify the `ServerName`, `Port`, `TransportProtocol`, `SeverityRules`, `AdvancedFilters`, or `UseBackupServerSyslogOptions` parameters while syslog forwarding is disabled. Provide the `EnableSyslogForwarding` parameter to enable forwarding first. The `UseBackupServerSyslogOptions` parameter and the manual server parameters (`ServerName`, `Port`, `TransportProtocol`) are mutually exclusive.

:::

## Parameters

<table style="width:100%;" class="Blue_Table">
      <tr style="vertical-align:top">
        <th style="width:20%;">
          <p>Parameter</p>
        </th>
        <th style="width:20%;">
          <p>Description</p>
        </th>
        <th style="width:20%;">
          <p>Type</p>
        </th>
        <th style="width:10%;">
          <p>Required</p>
        </th>
        <th style="width:10%;">
          <p>Position</p>
        </th>
        <th style="width:10%;">
          <p>Accept Pipeline Input</p>
        </th>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">AdvancedFilters</span></p>
        </td>
        <td>
          <p>Specifies the array of per-application filtering rules that override the default severity rules for specific applications or daemons.</p><p>Accepts the <a href="vbrvsaeventforwardingfilteringrule.md"><code>VBRVSAEventForwardingFilteringRule</code></a>[] object. To create this object, run the <a href="new-vbrvsaeventforwardingfilteringrule.md"><code>New-VBRVSAEventForwardingFilteringRule</code></a> cmdlet.</p>
        </td>
        <td style="width:10%;">
          <p><a href="vbrvsaeventforwardingfilteringrule.md"><code>VBRVSAEventForwardingFilteringRule[]</code></a></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">EnableSyslogForwarding</span></p>
        </td>
        <td>
          <p>Enables syslog event forwarding for the Veeam Software Appliance. To disable forwarding, set the parameter value to <code>$false</code>. That is, <code>EnableSyslogForwarding:$false</code>.</p>
        </td>
        <td style="width:10%;">
          <p><code>SwitchParameter</code></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">Port</span></p>
        </td>
        <td>
          <p>Specifies the port number of the syslog server. Permitted values: <code>1</code>-<code>65535</code>.</p>
        </td>
        <td style="width:10%;">
          <p><code>Int32</code></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">ServerName</span></p>
        </td>
        <td>
          <p>Specifies the DNS name or IP address of the syslog server to which appliance events will be forwarded.</p>
        </td>
        <td style="width:10%;">
          <p><code>String</code></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">SeverityRules</span></p>
        </td>
        <td>
          <p>Specifies an array of severity levels that the appliance will forward by default. Specify a single value from the list — the appliance forwards events at that severity and higher. Accepted values:</p><ul><li><code>Emergency</code></li><li><code>Alert</code></li><li><code>Critical</code></li><li><code>Error</code></li><li><code>Warning</code></li><li><code>Notice</code></li><li><code>Informational</code></li><li><code>Debug</code></li></ul>
        </td>
        <td style="width:10%;">
          <p><code>VBRSyslogServerEventSeverity[]</code></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">TransportProtocol</span></p>
        </td>
        <td>
          <p>Specifies the transport protocol that the appliance will use to send messages to the syslog server. Accepted values:</p><ul><li><code>Udp</code></li><li><code>Tcp</code></li><li><code>Tls</code></li></ul>
        </td>
        <td style="width:10%;">
          <p><code>VBRSyslogServerProtocol</code></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">UseBackupServerSyslogOptions</span></p>
        </td>
        <td>
          <p>Defines that the appliance will reuse the syslog server settings configured on the Veeam Backup & Replication server. When this parameter is set, you cannot specify the <code>ServerName</code>, <code>Port</code> or <code>TransportProtocol</code> parameters.</p>
        </td>
        <td style="width:10%;">
          <p><code>SwitchParameter</code></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
    </table>

`<CommonParameters>`

This cmdlet supports Microsoft PowerShell common parameters. For more information on common parameters, see [ Microsoft Docs](https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_commonparameters?view=powershell-7).

## Output Object
[`VBRVSAEventForwardingOptions`](vbrvsaeventforwardingoptions.md)

## Examples

::: example
### Example 1. Enabling Veeam Software Appliance Syslog Forwarding to Dedicated Server

This example shows how to enable Veeam Software Appliance syslog event forwarding to a dedicated syslog server using the TCP transport protocol.

```
Set-VBRVSAEventForwardingOptions -EnableSyslogForwarding -ServerName "syslog.tech.local" -Port 514 -TransportProtocol Tcp -SeverityRules Error
```

Perform the following steps:

1. Run the `Set-VBRVSAEventForwardingOptions` cmdlet. Specify the following settings:

   - Provide the `EnableSyslogForwarding` parameter.
   - Specify the `ServerName` parameter value.
   - Specify the `Port` parameter value.
   - Set the `Tcp` value as the `TransportProtocol` parameter value.
   - Set `Error` as the `SeverityRules` parameter value.

:::

::: example
### Example 2. Reusing Backup Server Syslog Settings With Advanced Filter

This example shows how to enable appliance syslog forwarding using the syslog server already configured on the Veeam Backup & Replication server, and add an advanced filtering rule for the `sshd` daemon.

```
$rule = New-VBRVSAEventForwardingFilteringRule -Application "sshd" -SeverityRules Error, Critical
Set-VBRVSAEventForwardingOptions -EnableSyslogForwarding -UseBackupServerSyslogOptions -AdvancedFilters $rule
```

Perform the following steps:

1. Run the [`New-VBRVSAEventForwardingFilteringRule`](new-vbrvsaeventforwardingfilteringrule.md) cmdlet. Specify the `Application` and `SeverityRules` parameter values. Save the result to the `$rule` variable.
2. Run the `Set-VBRVSAEventForwardingOptions` cmdlet. Specify the following settings:

   - Provide the `EnableSyslogForwarding` parameter.
   - Provide the `UseBackupServerSyslogOptions` parameter.
   - Set the `$rule` variable as the `AdvancedFilters` parameter value.

:::

::: example
### Example 3. Disabling Veeam Software Appliance Syslog Forwarding

This example shows how to disable Veeam Software Appliance syslog event forwarding.

```
Set-VBRVSAEventForwardingOptions -EnableSyslogForwarding:$false
```

Run the `Set-VBRVSAEventForwardingOptions` cmdlet. Set the `EnableSyslogForwarding` parameter value to `$false`.

:::

## Related Commands

- [`Get-VBRVSAEventForwardingOptions`](get-vbrvsaeventforwardingoptions.md)
- [`New-VBRVSAEventForwardingFilteringRule`](new-vbrvsaeventforwardingfilteringrule.md)