---
title: "Get-VBREntraIDLogsBackupFLRItem"
description: "Returns backed-up objects created by a log backup job. Product Edition: Enterprise Plus, Veeam Universal License This cmdlet returns an array of backed-up objects created by a log backup job."
canonical: "https://helpcenter.veeam.com/docs/vbr/powershell/get-vbrentraidlogsbackupflritem.html"
breadcrumb: "Veeam PowerShell Reference > Veeam PowerShell Reference > Microsoft EntraID Support > Log Data Recovery > Get-VBREntraIDLogsBackupFLRItem"
dateModified: "2026-08-19"
---

# Get-VBREntraIDLogsBackupFLRItem

## Short Description
Returns backed-up objects created by a log backup job.

**Product Edition**: Enterprise Plus, Veeam Universal License

## Syntax
```
Get-VBREntraIDLogsBackupFLRItem -Session <VBRUnstructuredBackupFLRSession> [-Name <String>]
 [-Folder <VBRUnstructuredBackupFLRFolder>] [-Recurse] [<CommonParameters>]
```

## Detailed Description
This cmdlet returns an array of backed-up objects created by a log backup job. These objects contain settings of log files and folders backed up by a log backup job.

## Parameters

<table style="width:100%;" class="Blue_Table">
      <tr style="vertical-align:top">
        <th style="width:20%;">
          <p>Parameter</p>
        </th>
        <th style="width:20%;">
          <p>Description</p>
        </th>
        <th style="width:20%;">
          <p>Type</p>
        </th>
        <th style="width:10%;">
          <p>Required</p>
        </th>
        <th style="width:10%;">
          <p>Position</p>
        </th>
        <th style="width:10%;">
          <p>Accept Pipeline Input</p>
        </th>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">Folder</span></p>
        </td>
        <td>
          <p>Specifies a backed-up folder. The cmdlet will return objects that are added to this folder.</p><p>Accepts the <code>VBRUnstructuredBackupFLRFolder</code> object. To get this object, run the <code>Get-VBREntraIDLogsBackupFLRItem</code> cmdlet.</p>
        </td>
        <td style="width:10%;">
          <p><code>VBRUnstructuredBackupFLRFolder</code></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">Name</span></p>
        </td>
        <td>
          <p>Specifies a name of the backed-up object. The cmdlet will return folders and files with the specified name.</p><p><strong>Note</strong>: By default, the cmdlet returns up to 10,000 records (folders and files). You can change the default value with a registry key. For more information, contact <a href="https://www.veeam.com/de/support.html?ad=menu-support">Veeam Customer Support</a>.</p>
        </td>
        <td style="width:10%;">
          <p><code>String</code></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">Recurse</span></p>
        </td>
        <td>
          <p>Defines that the cmdlet will look for objects that are added to backed-up child folders.</p><p>If you provide this parameter, the cmdlet will return an array of all objects that are added to backed-up child folders. Otherwise, the cmdlet will return an array of objects that are added to the parent folder.</p>
        </td>
        <td style="width:10%;">
          <p><code>SwitchParameter</code></p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">Session</span></p>
        </td>
        <td>
          <p>Specifies a restore session. The cmdlet will return backed-up objects within this restore session.</p><p>Accepts the <code>VBRUnstructuredBackupFLRSession</code> object. To create this object, run the <a href="start-vbrentraidlogsbackupflrsession.md"><code>Start-VBREntraIDLogsBackupFLRSession</code></a> cmdlet.</p>
        </td>
        <td style="width:10%;">
          <p><code>VBRUnstructuredBackupFLRSession</code></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>True (ByPropertyName, ByValue)</p>
        </td>
      </tr>
    </table>

`<CommonParameters>`

This cmdlet supports Microsoft PowerShell common parameters. For more information on common parameters, see [ Microsoft Docs](https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_commonparameters?view=powershell-7).

## Output Object
The cmdlet returns the array of `VBRUnstructuredBackupFLRItem` objects that contain settings of log files and folders backed up by the log backup job.

## Examples

::: example
### Example 1. Getting First-Level Log Folders

This example shows how to get first-level log folders.

```
$tenant = Get-VBREntraIdTenant -AzureTenantId "xxxxx"
$logBackups = Get-VBREntraIDLogsBackup
$logRestoreSession = Start-VBREntraIDLogsBackupFLRSession -Backup $logBackups[0] -Tenant $tenant
$folders = Get-VBREntraIDLogsBackupFLRItem -Session $logRestoreSession
```

Perform the following steps:

1. Run the [`Get-VBREntraIdTenant`](get-vbrentraidtenant.md) cmdlet. Specify the `AzureTenantId` parameter value. Save the result to the `$tenant` variable.
2. Run the [`Get-VBREntraIDLogsBackup`](get-vbrentraidlogsbackup.md) cmdlet.

   The `Get-VBREntraIDLogsBackup` cmdlet will return an array of backups. Mind the ordinal number of the necessary backup, for arrays it starts with 0. In our example, it is the first backup in the array.

3. Run the [`Start-VBREntraIDLogsBackupFLRSession`](start-vbrentraidlogsbackupflrsession.md) cmdlet. Set the `$logBackups[0]` variable as the `Backup` parameter value. Set the `$tenant` variable as the `Tenant` parameter value. Save the result to the `$logRestoreSession` variable.
4. Run the `Get-VBREntraIDLogsBackupFLRItem` cmdlet. Set the `$logRestoreSession` variable as the `Session` parameter value. Save the result to the `$folders` variable.

:::

::: example
### Example 2. Getting All Backed-Up Log Files and Folders

This example shows how to get all backed-up log files and folders.

```
$tenant = Get-VBREntraIdTenant -AzureTenantId "xxxxx"
$logBackups = Get-VBREntraIDLogsBackup
$logRestoreSession = Start-VBREntraIDLogsBackupFLRSession -Backup $logBackups[0] -Tenant $tenant
$filesFolders = Get-VBREntraIDLogsBackupFLRItem -Session $logRestoreSession -Recurse
```

Perform the following steps:

1. Run the [`Get-VBREntraIdTenant`](get-vbrentraidtenant.md) cmdlet. Specify the `AzureTenantId` parameter value. Save the result to the `$tenant` variable.
2. Run the [`Get-VBREntraIDLogsBackup`](get-vbrentraidlogsbackup.md) cmdlet.

   The `Get-VBREntraIDLogsBackup` cmdlet will return an array of backups. Mind the ordinal number of the necessary backup, for arrays it starts with 0. In our example, it is the first backup in the array.

3. Run the [`Start-VBREntraIDLogsBackupFLRSession`](start-vbrentraidlogsbackupflrsession.md) cmdlet. Set the `$logBackups[0]` variable as the `Backup` parameter value. Set the `$tenant` variable as the `Tenant` parameter value. Save the result to the `$logRestoreSession` variable.
4. Run the `Get-VBREntraIDLogsBackupFLRItem` cmdlet. Specify the following settings:

   - Set the `$logRestoreSession` variable as the `Session` parameter value.
   - Provide the `Recurse` parameter.
   - Save the result to the `$filesFolders` variable.

:::

::: example
### Example 3. Getting Specific Files

This example shows how to get audit and sign-in log files whose names start with `2024-11-01T10`.

```
$tenant = Get-VBREntraIdTenant -AzureTenantId "xxxxx"
$logBackups = Get-VBREntraIDLogsBackup
$logRestoreSession = Start-VBREntraIDLogsBackupFLRSession -Backup $logBackups[0] -Tenant $tenant
$files = Get-VBREntraIDLogsBackupFLRItem -Session $logRestoreSession -Name "2024-11-01T10*" -Recurse
```

Perform the following steps:

1. Run the [`Get-VBREntraIdTenant`](get-vbrentraidtenant.md) cmdlet. Specify the `AzureTenantId` parameter value. Save the result to the `$tenant` variable.
2. Run the [`Get-VBREntraIDLogsBackup`](get-vbrentraidlogsbackup.md) cmdlet.

   The `Get-VBREntraIDLogsBackup` cmdlet will return an array of backups. Mind the ordinal number of the necessary backup, for arrays it starts with 0. In our example, it is the first backup in the array.

3. Run the [`Start-VBREntraIDLogsBackupFLRSession`](start-vbrentraidlogsbackupflrsession.md) cmdlet. Set the `$logBackups[0]` variable as the `Backup` parameter value.Set the `$tenant` variable as the `Tenant` parameter value. Save the result to the `$logRestoreSession` variable.
4. Run the `Get-VBREntraIDLogsBackupFLRItem` cmdlet. Specify the following settings:

   - Set the `$logRestoreSession` variable as the `Session` parameter value.
   - Specify the `Name` parameter value.
   - Provide the `Recurse` parameter value.
   - Save the result to the `$files` variable.

:::

::: example
### Example 4. Getting Logs from Specific Folder

This example shows how to get all files that are located in the the `Audit Logs` folder. The `Audit Logs` folder is located in the `November 2024` folder.

```
$tenant = Get-VBREntraIdTenant -AzureTenantId "xxxxx"
$logBackups = Get-VBREntraIDLogsBackup
$logRestoreSession = Start-VBREntraIDLogsBackupFLRSession -Backup $logBackups[0] -Tenant $tenant
$novemberFolder = Get-VBREntraIDLogsBackupFLRItem -Session $logRestoreSession -Name "November 2024"
$auditLogsFolder = Get-VBREntraIDLogsBackupFLRItem -Session $logRestoreSession -Folder $novemberFolder -Name "Audit Logs"
$novAuditLogs = Get-VBREntraIDLogsBackupFLRItem -Session $logRestoreSession -Folder $auditLogsFolder
```

Perform the following steps:

1. Run the [`Get-VBREntraIdTenant`](get-vbrentraidtenant.md) cmdlet. Specify the `AzureTenantId` parameter value. Save the result to the `$tenant` variable.
2. Run the [`Get-VBREntraIDLogsBackup`](get-vbrentraidlogsbackup.md) cmdlet.

   The `Get-VBREntraIDLogsBackup` cmdlet will return an array of backups. Mind the ordinal number of the necessary backup, for arrays it starts with 0. In our example, it is the first backup in the array.

3. Run the [`Start-VBREntraIDLogsBackupFLRSession`](start-vbrentraidlogsbackupflrsession.md) cmdlet. Set the `$logBackups[0]` variable as the `Backup` parameter value. Set the `$tenant` variable as the `Tenant` parameter value. Save the result to the `$logRestoreSession` variable.
4. Run the `Get-VBREntraIDLogsBackupFLRItem` cmdlet. Set the `$logRestoreSession` variable as the `Session` parameter value. Specify the `Name` parameter value. Save the result to the `$novemberFolder` variable.
5. Run the `Get-VBREntraIDLogsBackupFLRItem` cmdlet. Specify the following settings:

   - Set the `$logRestoreSession` variable as the `Session` parameter value.
   - Set the `$novemberFolder` variable as the `Folder` parameter value.
   - Specify the `Name` parameter value.
   - Save the result to the `$auditLogsFolder` variable.

6. Run the `Get-VBREntraIDLogsBackupFLRItem` cmdlet. Specify the following settings:

   - Set the `$logRestoreSession` variable as the `Session` parameter value.
   - Set the `$auditLogsFolder` variable as the `Folder` parameter value.
   - Save the result to the `$novAuditLogs` variable.

:::

## Related Commands

- [`Get-VBREntraIdTenant`](get-vbrentraidtenant.md)
- [`Get-VBREntraIDLogsBackup`](get-vbrentraidlogsbackup.md)
- [`Start-VBREntraIDLogsBackupFLRSession`](start-vbrentraidlogsbackupflrsession.md)